0, &(0x7f0000001780)=[{&(0x7f00000006c0)="104a2d9e3da15b605e2e56c00c59cac3", 0x10}], 0x1, &(0x7f0000002800)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0) 19:23:51 executing program 6: r0 = memfd_create(&(0x7f0000000500)='/dev/input/event#\x00', 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000004, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000005c0)={0xaa}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x2000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)=""/241) mq_unlink(&(0x7f0000000540)='queue1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffbff, 'queue1\x00', 0x5ca}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000240)=""/70) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000004c0)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)) mq_timedreceive(r1, &(0x7f0000000400)=""/184, 0xb8, 0x0, 0x0) close(r1) 19:23:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x1) 19:23:52 executing program 4: r0 = memfd_create(&(0x7f0000000500)='/dev/input/event#\x00', 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000004, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000005c0)={0xaa}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x2000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)=""/241) mq_unlink(&(0x7f0000000540)='queue1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffbff, 'queue1\x00', 0x5ca}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000240)=""/70) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000004c0)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)) mq_timedreceive(r1, &(0x7f0000000400)=""/184, 0xb8, 0x0, 0x0) close(r1) 19:23:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x40, 0x6}) 19:23:52 executing program 6: r0 = memfd_create(&(0x7f0000000500)='/dev/input/event#\x00', 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000004, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000005c0)={0xaa}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x2000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)=""/241) mq_unlink(&(0x7f0000000540)='queue1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffbff, 'queue1\x00', 0x5ca}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000240)=""/70) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000004c0)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)) mq_timedreceive(r1, &(0x7f0000000400)=""/184, 0xb8, 0x0, 0x0) close(r1) 19:23:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="1e"], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:52 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000000001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000100)) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 19:23:52 executing program 7: r0 = memfd_create(&(0x7f0000000500)='/dev/input/event#\x00', 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000004, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000005c0)={0xaa}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x2000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)=""/241) mq_unlink(&(0x7f0000000540)='queue1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffbff, 'queue1\x00', 0x5ca}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000240)=""/70) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000004c0)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)) mq_timedreceive(r1, &(0x7f0000000400)=""/184, 0xb8, 0x0, 0x0) close(r1) 19:23:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006800)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1}, 0x0) 19:23:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x40, 0x6}) 19:23:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x1) 19:23:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006800)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1}, 0x0) 19:23:52 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000000001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000100)) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 19:23:52 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000000001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000100)) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 19:23:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x1) 19:23:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x40, 0x6}) 19:23:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006800)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1}, 0x0) 19:23:52 executing program 4: r0 = memfd_create(&(0x7f0000000500)='/dev/input/event#\x00', 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000004, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000005c0)={0xaa}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x2000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)=""/241) mq_unlink(&(0x7f0000000540)='queue1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffbff, 'queue1\x00', 0x5ca}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000240)=""/70) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000004c0)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)) mq_timedreceive(r1, &(0x7f0000000400)=""/184, 0xb8, 0x0, 0x0) close(r1) 19:23:52 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000000001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000100)) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 19:23:52 executing program 7: r0 = memfd_create(&(0x7f0000000500)='/dev/input/event#\x00', 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000004, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000005c0)={0xaa}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x2000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)=""/241) mq_unlink(&(0x7f0000000540)='queue1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffbff, 'queue1\x00', 0x5ca}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000240)=""/70) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000004c0)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)) mq_timedreceive(r1, &(0x7f0000000400)=""/184, 0xb8, 0x0, 0x0) close(r1) 19:23:52 executing program 6: r0 = memfd_create(&(0x7f0000000500)='/dev/input/event#\x00', 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000004, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000005c0)={0xaa}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x2000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) close(r2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)=""/241) mq_unlink(&(0x7f0000000540)='queue1\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffbff, 'queue1\x00', 0x5ca}) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000240)=""/70) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000004c0)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)) mq_timedreceive(r1, &(0x7f0000000400)=""/184, 0xb8, 0x0, 0x0) close(r1) 19:23:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000140)=0x1) 19:23:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0x40, 0x6}) 19:23:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006800)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1}, 0x0) 19:23:52 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000000001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000100)) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 19:23:52 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000000001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000100)) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 19:23:52 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000080)=""/250, 0xfa) 19:23:52 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1000, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000940)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffffffeffffe, r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x2}]) 19:23:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000540)=0x82, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001900)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x850, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x83c, 0x0, [@typed={0x838, 0x0, @binary="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"}]}]}, 0x850}, 0x1}, 0x4011) 19:23:52 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000080)=""/250, 0xfa) 19:23:52 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000000001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000100)) sendfile(r0, r1, &(0x7f00000000c0), 0x80000002) 19:23:52 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1000, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000940)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffffffeffffe, r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x2}]) 19:23:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4030ae7b, 0x0) 19:23:52 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000440)=""/207, 0x49d, &(0x7f000072bfce)=""/50, 0x0, 0x402}}, 0x1f9) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 19:23:52 executing program 6: syz_emit_ethernet(0xfdef, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 19:23:52 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000080)=""/250, 0xfa) 19:23:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) write$binfmt_aout(r0, &(0x7f00000003c0)={{}, "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"}, 0xc41) 19:23:53 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1000, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000940)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffffffeffffe, r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x2}]) 19:23:53 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000440)=""/207, 0x49d, &(0x7f000072bfce)=""/50, 0x0, 0x402}}, 0x1f9) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 19:23:53 executing program 6: syz_emit_ethernet(0xfdef, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 19:23:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4030ae7b, 0x0) 19:23:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4030ae7b, 0x0) 19:23:53 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(&(0x7f0000000080)=""/250, 0xfa) 19:23:53 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) io_setup(0x1000, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000940)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffffffeffffe, r0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x2}]) 19:23:53 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000003000000000000000000000000000000000000000000000058db109800"], 0x21) 19:23:53 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000440)=""/207, 0x49d, &(0x7f000072bfce)=""/50, 0x0, 0x402}}, 0x1f9) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 19:23:53 executing program 6: syz_emit_ethernet(0xfdef, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 19:23:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4030ae7b, 0x0) 19:23:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4030ae7b, 0x0) 19:23:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x57b1) sendmmsg$inet_sctp(r1, &(0x7f0000007080)=[{&(0x7f0000000140)=@in6={0xa, 0x0, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4103000000000000], 0xbb}}, 0x1c, &(0x7f0000000540)}], 0x924914a, 0x0) 19:23:53 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd96}, 0x10) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) 19:23:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x57b1) sendmmsg$inet_sctp(r1, &(0x7f0000007080)=[{&(0x7f0000000140)=@in6={0xa, 0x0, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4103000000000000], 0xbb}}, 0x1c, &(0x7f0000000540)}], 0x924914a, 0x0) 19:23:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) write$binfmt_aout(r0, &(0x7f00000003c0)={{}, "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"}, 0xc41) 19:23:54 executing program 6: syz_emit_ethernet(0xfdef, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 19:23:54 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000440)=""/207, 0x49d, &(0x7f000072bfce)=""/50, 0x0, 0x402}}, 0x1f9) write$vnet(r0, &(0x7f000046df98)={0x1, {&(0x7f0000c7f000)=""/28, 0x1, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 19:23:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4030ae7b, 0x0) 19:23:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4030ae7b, 0x0) 19:23:54 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000003000000000000000000000000000000000000000000000058db109800"], 0x21) 19:23:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x57b1) sendmmsg$inet_sctp(r1, &(0x7f0000007080)=[{&(0x7f0000000140)=@in6={0xa, 0x0, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4103000000000000], 0xbb}}, 0x1c, &(0x7f0000000540)}], 0x924914a, 0x0) 19:23:54 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd96}, 0x10) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) 19:23:54 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) write$binfmt_aout(r0, &(0x7f00000003c0)={{}, "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"}, 0xc41) 19:23:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x57b1) sendmmsg$inet_sctp(r1, &(0x7f0000007080)=[{&(0x7f0000000140)=@in6={0xa, 0x0, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4103000000000000], 0xbb}}, 0x1c, &(0x7f0000000540)}], 0x924914a, 0x0) 19:23:54 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000003000000000000000000000000000000000000000000000058db109800"], 0x21) 19:23:54 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd96}, 0x10) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) 19:23:54 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000003000000000000000000000000000000000000000000000058db109800"], 0x21) 19:23:54 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 19:23:54 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 19:23:54 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) 19:23:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) write$binfmt_aout(r0, &(0x7f00000003c0)={{}, "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"}, 0xc41) 19:23:55 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd96}, 0x10) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) 19:23:55 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000003000000000000000000000000000000000000000000000058db109800"], 0x21) 19:23:55 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000003000000000000000000000000000000000000000000000058db109800"], 0x21) 19:23:55 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 19:23:55 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd96}, 0x10) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) 19:23:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) 19:23:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) 19:23:55 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) write$binfmt_aout(r0, &(0x7f00000003c0)={{}, "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"}, 0xc41) 19:23:55 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 19:23:55 executing program 4: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000003000000000000000000000000000000000000000000000058db109800"], 0x21) 19:23:55 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) close(r0) 19:23:55 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd96}, 0x10) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) 19:23:55 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x105f}, 0xfffffffffffffdc0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x2}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 19:23:55 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0xd96}, 0x10) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)) 19:23:55 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) 19:23:56 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x13, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:23:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) write$binfmt_aout(r0, &(0x7f00000003c0)={{}, "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"}, 0xc41) 19:23:56 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x105f}, 0xfffffffffffffdc0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x2}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 19:23:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x2}, @free_buffer={0x40086303}], 0x0, 0x10000000, &(0x7f00000001c0)}) pread64(r0, &(0x7f0000000480)=""/215, 0xd7, 0x0) 19:23:56 executing program 2: setrlimit(0x8, &(0x7f0000000000)) mlockall(0x2) 19:23:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_newroute={0x1b, 0x18, 0x1, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) [ 484.865495] binder: 1378:1379 Acquire 1 refcount change on invalid ref 2 ret -22 [ 484.881614] binder: 1378:1379 BC_FREE_BUFFER u0000000000000000 no match [ 484.894222] binder: 1378:1379 Acquire 1 refcount change on invalid ref 2 ret -22 19:23:56 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x105f}, 0xfffffffffffffdc0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x2}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 19:23:56 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x13, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 484.919277] binder: 1378:1379 BC_FREE_BUFFER u0000000000000000 no match 19:23:56 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) sendto$inet(r0, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) write$binfmt_aout(r0, &(0x7f00000003c0)={{}, "36ef58409af6a55faf2f5e2b1e58420608603fddf9efd5c3cab674a97a8bb17d83970cef87010555e26ea70cf7ce97e88ee927db969ae75ddba4b10a2a252c9b77516683e49e7fe3b9918885dad4421c14e0fe2eac2cb14593d5153496d3e04f3b8a573483177bd8593058aaf3bf0f7d1a290132e3a507eba7ebd2e9ccb23eb54c1e65ae0e61d5f30479abb9d4a17520949ae2978d7589e22da1647feaab568e0883a0364990a8cc2586b807da904b1ea52d023b1fb72638a651bee53cdefdcd7f5f983c74eea6876d1074b0934ee26c75669960c9da436970e51b50df484966ac8bb3376708202ac795db4b8ec4b14fb0631e2a0ed1ecf279e15611687afa2fcd4aa0d3564c3352f608cc06f1f29e51eb5c82f0254ab6e8db9927fb4d4dec20ee0e0c0d06b8c48c4b2aec419726ed080f20d25db945f330036c3112d5192b507eb0747ca1a08559a44e4f937c6d51975c7254cf7d044e4c11a1871929145c460beefcd11bbb8e7d3095605f607bb1fc685ceeac554d3643da5090c51ae40f406ced3bfa12cd63b1c3660c264902a005e79e207dc90af5a1ba32bd97f252c00d5edf7432d6daeb6cad5121d58048401c927bfe729c25e0621c56208333e568eb4115069ddd99853e5509014f9a1e81f96adc89b4eabb2ed7c7a886e86306cc80895dd11aa6dc002a10f7eefbb91e6b3a1d9a4836f2f59f4aef71526da67c493c0142c5dd93267f7eff282f2af50d3965210cb2aa28f07b1aba429aaab19195c00fa31453985f5865d296ddd88fc098daedc86535c1d92ee07fea3339aba5b59683aabf4e43da3e656605cb1528705e8444db11feef5af902d3a8e077fe31c88887b5b2efc52263fe7b6fcca6726b1b64a64bccf5c1f07e5934a53fdaea12f83594754c75ae5aa218b1825c8793b2cd9e2a94c9d294f92a3f557471364c769e17564e21051c48edae3342b8986b356fd4ee5d0d205e88207f42c385b7a960977ba7e9b0828a18fd3a9275001443436383154348e943e5842c2928f3cd02d9d4ce18d08a9716bfaf335172615a8ad827601a6cf55f8f2fbf2ecc7577d9a70fad73bdbdd092c69bc1c4d0a7782dfdf29bee6a037de495ba5e26d0bd0d6c09f3dab8c5ba492699cf77e82a2ff32ef894fe0b27a903de2edbc9c94aede7bc21d9264565a1ffcd3ee103f6755b36c2fe5cf465faa1d5ce1f30cdb746bd16338f239f2ccee4ae684a23acf00ba0aed16a9c83b3e50aa5d73a7c0b3f97a36b19f35e8b0972b358d3ae867dca8321e7d701d81a085666d206baa18aa584e39532a0be024c4f9f106a721a52cf8ea508eda39d0efb89ab1d9f096a95fe4fbb5ce1acc87c7ac3ea2e29dbed055114a223e5325a5d00d8969605cfc05bd88b233a1af95283cf71513d5ab7a7964892354e3dd0a2debc6c394e53a10c6169660e0a54ac4ae686408e9ecb3a7b9c6d7fed4af721e72c3fefbc2f6db7a7fede1af12bac1366dddc0470a15b7e1af8b32fd10da88b8bed45954e6f33e1c7a73f90b0175635c5148869f9c3aaba2f06d9c039e9a0db8c1343dfaed8f2c3dd2bf367c8c8dc3e4798f5a8bf7f69f49eaeccdf76e80c41c988c138818fd758c63d6732a64a6063005d9256f95e3d3792e2ddd6747bfbda8c3978d1d8e81aacdc66fcb4b75a927cb76e9eb316b515e0f906f1ab50f8bea2ff434628609d00c46c1d26786e1c061e6c2695b03b9ae3c26d69116e1c61cf4cc82c22c68fe0f0195a473af6547d0df82b8ff175240b445f72d90d5be7aacdccc6f1ae633a23d254e2e7ebbd046b9ab36eb9350a8d3e6a9c8fba95ac1ea676891c1fd4e34eaffd535afade3004a5f358b963d4299f3eb985b5e291531a056eef76e9f3204c5ae540034721db229e0f825f5905161fe685f391fbf8b2f20ba22f5c262ff45e5853da795dd24e371391b08800d101b0409f8d85a2fc9be0f6c6ced93502f925a4142352c57e89ede2f2001c824e7c81a828a6d0ae689625d443f4620b853b5ad88c19015b2dcbbd319cd400d29f19d1a527fcb0d2dc58ea7958ee711c684089e4d445aeb04daec28387e1422b122bd7c8e823715c29c7264086a3a1200b9f5513d560cdad00b4da35552ed7d19ed61f628e769724ca5bdd2c7fe61334e658482ac6e6ea185ef1f11a4b8ccf13404e74a496eda6b27590c5f10f38c16a43e0272d48d5318e0a5108ff533e0697e2bf12778aeb59ac0f8053ead84db5b93c6ac0a40d7ae18d6db48d35fec173465a445da7128dd74bda562a606eb1611bc53e6473889155fa6106bc46b8ed15e266be932a93cf76e6ddbf982e3479dcc8ef8d311df8478c63bceec68c0a2cacb639739b81222f1b06f45097966e7ded62179debb58af04d0f3f19ae7c090908ea747eff0592bb1fda1c66b45e0d29e843b24df2c3680428a43aa520c7b89f8767c528bff3d873f47a90c397cfc5516a046494baae21ae61d88fcf1186a48601347605fd934b6842ab837530d50fe26750a376be390f6bdd93d882b670a83655b1e7fc0e5d0bbfecdbc3aee9afbc4bd0163ba0ec7469030bcd2ae4adcc107b5e571b7e7b0befb63e43fc26b2d84b1b6a295d729f0291e53293a363fe61e304dda72f607605037f53eee9555e5b01c5b222aa946730fbf474c308dec2c513dd6b9626537dce10174ceaa67fad33d0d40ce9c6b56d907eeec95517e2658c86eedcb1f18ecbeba2ad291db7d7f3347c80159fd686cd80c225763de217eea619cdd6f378368371a81beb45c2312550ab662f37ded2d752df0c19f1295479450e9629b945628e9151eda6243f1a9ce69592d58a61eaccd4162b3873047ea689cfe1d3b980e53ce355f25dca6eb5a3557b0692866fd1dd8aac4cc36f7641a7cda910b5066a741ce635c03eb9ebc3fb0e5e1a53bef271e0e3a3b970398a86327191ff76e2411269d498da6034945024346fb29c69f67192516bbc633ff7d75b080623ed09ff7cd52d782809fdef818f7d48f638c300778b3debee97b1dfda6faae8d1d8f2701e39fe1ea2a6ea54cecfd2fdd547ae774e80c5a342a6563baf7e0071d66befa9d92cf87cd89ad8d66bcd3dda3ca7191cb132d965843b97d1450cf1f6efc770e4342ee00e997150940d775d587ae99c31dcaa0c03fd154c4c7e78dd3dc14996f571fd6a2156f3f6b1c283aebeeb5e1847768086d8dd51631205a6a61242490ffdfc6bef0332322dc39b141407bd43ea566c9bc6d3a3029ce41c32ad5f83f006056ed67045cb27e0d62b9fb4f6925367545c3785ea5d64785f0c8ab4aee68218e6b164b857983400fd2255f7c2fc03db76fcc18b83fab2f003a6d7c9bb71e6126ff404ddb9ae68e7b527ac6beb6d749080beb6e49955bce280a5f138b39da820c00ed597fdd7c95b60c9892cf5b8e714935c93a201296fd0ce019ae04e5b2c622df3596f7be285a37cee87ca1cdcffc96148dbbeddaf6c3d3cd4ccb041b8e3d67a92b73658b97224ed30a10eb7a81171044b652ad4825c792f56d28b3ac3110fefaeabba244fe8bcccf9b149b24aaa0f4b63027b58ebab0bd8164e099c9b9d50a61361233401fa083a063a222728e21f96cb7d2d147a701445b2412ee2ddb0bb21dadd43e2bee8c4ce096cdd138ebbcfd9dcc1b67d5ebd50345070ae4a204b99c9e2ee88739182a392fbf31f468470e302b3867be48f0b387ea4ab25d995b584c1b3df177de0c420a5a7fc52cf4df756e44c7eb02a7c1dde285cf4567ba074de059da4eba4d70fa8a57cb45053075b9a91a0f179516d1154e1923a1b2b6c9b2827fd312b7c615d0421f3350a92eac523d3bf44c52cdf227c7ad8f78ded09e5ff45377654e6e7ac5bbecc5115a67a7ce34e06d0a224f06a52fe5cdb89df8f9b828f3e4983cc7b6cb048fe29cf618271885d6f744efccaa6246b4afa23201e3954e8785b7f54f2c48176a553284644b4b902d9ecc6a76f99cc4e47f73012ee98c654c4ab8cc786ca0422bd0f99a8cc7ae298cbe6e041f80b354247e7aa9e5c25b141d746e30c71556e12b7fe2f99a838930f4a69c666c4f495a839a1056290936ee06ea289ae16bdcfd493b9b2e21d800cf15c7ab2ba7f7da93dd8545bd6c054fcc5bbbcc47c515df309c810ebe8cf07c83b3c228f49094f6eb42f306336d51f424cf5594811856e0e76378afd182f471224e988b4252f5160aaf9bcf17b79fd3418d89cfd7394c6d7a42644e2fb629a66bdfc1c0faaa2ca2d01b00505b24e9a3cf2239dcd7aee4bcb1c8889d042c6a42edf23e14bac3c4b3bb2e2df772b8de59f7bb7dfef31816d2312f21517ff20e79b9cc436392ec0300155435695e12a1b2f4cb90f457f1a9486fcef55afd8245f9d12b9ef800e23fff95bf4484a5db9dc699043"}, 0xc41) 19:23:56 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) close(r0) 19:23:56 executing program 2: setrlimit(0x8, &(0x7f0000000000)) mlockall(0x2) 19:23:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_newroute={0x1b, 0x18, 0x1, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) 19:23:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x2}, @free_buffer={0x40086303}], 0x0, 0x10000000, &(0x7f00000001c0)}) pread64(r0, &(0x7f0000000480)=""/215, 0xd7, 0x0) 19:23:56 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x13, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:23:56 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x105f}, 0xfffffffffffffdc0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x2}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 19:23:56 executing program 2: setrlimit(0x8, &(0x7f0000000000)) mlockall(0x2) 19:23:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_newroute={0x1b, 0x18, 0x1, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) [ 485.114873] binder: 1412:1416 Acquire 1 refcount change on invalid ref 2 ret -22 [ 485.146861] binder: 1412:1416 BC_FREE_BUFFER u0000000000000000 no match 19:23:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@mpls_newroute={0x1b, 0x18, 0x1, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) 19:23:57 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x13, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:23:57 executing program 2: setrlimit(0x8, &(0x7f0000000000)) mlockall(0x2) 19:23:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x2}, @free_buffer={0x40086303}], 0x0, 0x10000000, &(0x7f00000001c0)}) pread64(r0, &(0x7f0000000480)=""/215, 0xd7, 0x0) 19:23:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x2}, @free_buffer={0x40086303}], 0x0, 0x10000000, &(0x7f00000001c0)}) pread64(r0, &(0x7f0000000480)=""/215, 0xd7, 0x0) 19:23:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000080), 0x30, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 19:23:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_names='\x00pp\x00'}) [ 485.927326] binder: 1439:1446 Acquire 1 refcount change on invalid ref 2 ret -22 [ 485.936583] binder: 1443:1447 Acquire 1 refcount change on invalid ref 2 ret -22 [ 485.946543] binder: 1439:1446 BC_FREE_BUFFER u0000000000000000 no match [ 486.021848] binder: 1443:1447 BC_FREE_BUFFER u0000000000000000 no match 19:23:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x2}, @free_buffer={0x40086303}], 0x0, 0x10000000, &(0x7f00000001c0)}) pread64(r0, &(0x7f0000000480)=""/215, 0xd7, 0x0) 19:23:57 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) close(r0) 19:23:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x0) 19:23:57 executing program 4: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x31, &(0x7f0000000000)='team_slave_0\x00', 0x10) 19:23:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x2}, @free_buffer={0x40086303}], 0x0, 0x10000000, &(0x7f00000001c0)}) pread64(r0, &(0x7f0000000480)=""/215, 0xd7, 0x0) 19:23:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000080), 0x30, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 19:23:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_names='\x00pp\x00'}) 19:23:57 executing program 6: r0 = socket$unix(0x1, 0x1000000002, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs, 0x5) [ 486.193848] binder: 1466:1469 Acquire 1 refcount change on invalid ref 2 ret -22 [ 486.221867] binder: 1467:1468 Acquire 1 refcount change on invalid ref 2 ret -22 [ 486.238981] binder: 1466:1469 BC_FREE_BUFFER u0000000000000000 no match 19:23:57 executing program 4: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x31, &(0x7f0000000000)='team_slave_0\x00', 0x10) 19:23:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x0) 19:23:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000080), 0x30, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 19:23:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_names='\x00pp\x00'}) 19:23:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x2}, @free_buffer={0x40086303}], 0x0, 0x10000000, &(0x7f00000001c0)}) pread64(r0, &(0x7f0000000480)=""/215, 0xd7, 0x0) 19:23:57 executing program 6: r0 = socket$unix(0x1, 0x1000000002, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs, 0x5) [ 486.275455] binder: 1467:1468 BC_FREE_BUFFER u0000000000000000 no match 19:23:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c504", 0x5) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0xe}}, 0x14}, 0x1}, 0x0) recvfrom(r1, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc={0x10}, 0x709000) [ 486.413446] binder: 1495:1499 Acquire 1 refcount change on invalid ref 2 ret -22 19:23:57 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_names='\x00pp\x00'}) 19:23:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x0) [ 486.458828] binder: 1495:1499 BC_FREE_BUFFER u0000000000000000 no match 19:23:58 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) close(r0) 19:23:58 executing program 4: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x31, &(0x7f0000000000)='team_slave_0\x00', 0x10) 19:23:58 executing program 6: r0 = socket$unix(0x1, 0x1000000002, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs, 0x5) 19:23:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000080), 0x30, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 19:23:58 executing program 7: keyctl$set_reqkey_keyring(0x3, 0xffffffffffffffff) 19:23:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5393, 0x0) 19:23:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="f1f3c66a8029aaa82fc2a1c227b1508b78", 0x11) 19:23:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c504", 0x5) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0xe}}, 0x14}, 0x1}, 0x0) recvfrom(r1, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc={0x10}, 0x709000) 19:23:58 executing program 4: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x31, &(0x7f0000000000)='team_slave_0\x00', 0x10) 19:23:58 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={"7261771100", 0x2, [{}, {}]}, 0x48) 19:23:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c504", 0x5) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0xe}}, 0x14}, 0x1}, 0x0) recvfrom(r1, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc={0x10}, 0x709000) 19:23:58 executing program 7: keyctl$set_reqkey_keyring(0x3, 0xffffffffffffffff) 19:23:58 executing program 6: r0 = socket$unix(0x1, 0x1000000002, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs, 0x5) 19:23:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000580)=""/140, 0x34d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000000)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2e5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 'client0\x00', 0x0, "501c576f0b5356be", "f42b0cf94610d33072a61b7fbeada1c341b5bf2c00ba817240d60980ad63fdd3"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) 19:23:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="f1f3c66a8029aaa82fc2a1c227b1508b78", 0x11) 19:23:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 19:23:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="f1f3c66a8029aaa82fc2a1c227b1508b78", 0x11) 19:23:59 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xf3, 0x8) 19:23:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c504", 0x5) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {0xe}}, 0x14}, 0x1}, 0x0) recvfrom(r1, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc={0x10}, 0x709000) 19:23:59 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={"7261771100", 0x2, [{}, {}]}, 0x48) 19:23:59 executing program 7: keyctl$set_reqkey_keyring(0x3, 0xffffffffffffffff) 19:23:59 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0x200005dc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:23:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="f1f3c66a8029aaa82fc2a1c227b1508b78", 0x11) 19:23:59 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={"7261771100", 0x2, [{}, {}]}, 0x48) 19:23:59 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) 19:23:59 executing program 7: keyctl$set_reqkey_keyring(0x3, 0xffffffffffffffff) 19:23:59 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xf3, 0x8) 19:23:59 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0x200005dc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:23:59 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) 19:23:59 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000580)=""/140, 0x34d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000000)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2e5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 'client0\x00', 0x0, "501c576f0b5356be", "f42b0cf94610d33072a61b7fbeada1c341b5bf2c00ba817240d60980ad63fdd3"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) 19:23:59 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={"7261771100", 0x2, [{}, {}]}, 0x48) 19:23:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 19:23:59 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xf3, 0x8) 19:23:59 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) 19:23:59 executing program 7: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2}, [{}]}, 0x58) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 19:23:59 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0x200005dc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:23:59 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) 19:23:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 19:23:59 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0xf3, 0x8) 19:23:59 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) 19:23:59 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) 19:23:59 executing program 7: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2}, [{}]}, 0x58) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 19:23:59 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0x200005dc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:23:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001580)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newaddr={0x40, 0x14, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}]}, 0x40}, 0x1}, 0x0) 19:24:00 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) 19:24:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000580)=""/140, 0x34d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000000)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2e5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 'client0\x00', 0x0, "501c576f0b5356be", "f42b0cf94610d33072a61b7fbeada1c341b5bf2c00ba817240d60980ad63fdd3"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) 19:24:00 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}], 0x10) 19:24:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 19:24:00 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 19:24:00 executing program 7: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2}, [{}]}, 0x58) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 19:24:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001580)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newaddr={0x40, 0x14, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}]}, 0x40}, 0x1}, 0x0) 19:24:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x1, 0x158, [0x0, 0x20000640, 0x20000670, 0x20000768], 0x0, &(0x7f0000000040), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth1\x00', 'bridge_slave_0\x00', 'dummy0\x00', 'ip6_vti0\x00', @random="feb6d7dbfec6", [], @random="1664186a80b5", [], 0xa0, 0xa0, 0xc8, [@mark_m={'mark_m\x00', 0xc, {{0x0, 0x0, 0x0, 0x3}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1a8) 19:24:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 19:24:00 executing program 7: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2}, [{}]}, 0x58) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 19:24:00 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 19:24:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48a}]}) 19:24:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001580)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newaddr={0x40, 0x14, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}]}, 0x40}, 0x1}, 0x0) 19:24:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x1, 0x158, [0x0, 0x20000640, 0x20000670, 0x20000768], 0x0, &(0x7f0000000040), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth1\x00', 'bridge_slave_0\x00', 'dummy0\x00', 'ip6_vti0\x00', @random="feb6d7dbfec6", [], @random="1664186a80b5", [], 0xa0, 0xa0, 0xc8, [@mark_m={'mark_m\x00', 0xc, {{0x0, 0x0, 0x0, 0x3}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1a8) 19:24:00 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 19:24:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x1, 0x158, [0x0, 0x20000640, 0x20000670, 0x20000768], 0x0, &(0x7f0000000040), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth1\x00', 'bridge_slave_0\x00', 'dummy0\x00', 'ip6_vti0\x00', @random="feb6d7dbfec6", [], @random="1664186a80b5", [], 0xa0, 0xa0, 0xc8, [@mark_m={'mark_m\x00', 0xc, {{0x0, 0x0, 0x0, 0x3}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1a8) 19:24:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48a}]}) 19:24:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000580)=""/140, 0x34d) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000000)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2e5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x404c534a, &(0x7f0000000340)={0x0, 0x0, 'client0\x00', 0x0, "501c576f0b5356be", "f42b0cf94610d33072a61b7fbeada1c341b5bf2c00ba817240d60980ad63fdd3"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) 19:24:01 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 19:24:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001580)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newaddr={0x40, 0x14, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}]}, 0x40}, 0x1}, 0x0) 19:24:01 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 19:24:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x1, 0x158, [0x0, 0x20000640, 0x20000670, 0x20000768], 0x0, &(0x7f0000000040), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth1\x00', 'bridge_slave_0\x00', 'dummy0\x00', 'ip6_vti0\x00', @random="feb6d7dbfec6", [], @random="1664186a80b5", [], 0xa0, 0xa0, 0xc8, [@mark_m={'mark_m\x00', 0xc, {{0x0, 0x0, 0x0, 0x3}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x4}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1a8) 19:24:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48a}]}) 19:24:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0xfffffdd7, &(0x7f0000000540)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) sendmmsg$unix(r0, &(0x7f0000000340), 0x492492492492a59, 0x0) 19:24:01 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000000)=""/219, 0x84417d2a9e6e9e46, &(0x7f0000000480)=""/98, 0x2, 0x2}}, 0x68) 19:24:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 19:24:01 executing program 6: r0 = memfd_create(&(0x7f0000000100)="7c6d1759334e3b64bd7944389deb79c9a09d5422173124569bfce0bad8fc9e3ac90aa2bb20752acfd250ee25a595fb71e1ea654e977d6f9e32394f0904254223e81395ff348a8d99a41e0e9f2ca72fb13f544432d4740532708e9b3b9b9c41abcd80f0eb989456796f82a92d2d8ae34b1413ff87afbc2832c2a75d9aaca4be01baa7", 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) 19:24:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48a}]}) 19:24:01 executing program 6: r0 = memfd_create(&(0x7f0000000100)="7c6d1759334e3b64bd7944389deb79c9a09d5422173124569bfce0bad8fc9e3ac90aa2bb20752acfd250ee25a595fb71e1ea654e977d6f9e32394f0904254223e81395ff348a8d99a41e0e9f2ca72fb13f544432d4740532708e9b3b9b9c41abcd80f0eb989456796f82a92d2d8ae34b1413ff87afbc2832c2a75d9aaca4be01baa7", 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) 19:24:01 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000000)=""/219, 0x84417d2a9e6e9e46, &(0x7f0000000480)=""/98, 0x2, 0x2}}, 0x68) 19:24:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 19:24:01 executing program 1: r0 = memfd_create(&(0x7f0000000100)="7c6d1759334e3b64bd7944389deb79c9a09d5422173124569bfce0bad8fc9e3ac90aa2bb20752acfd250ee25a595fb71e1ea654e977d6f9e32394f0904254223e81395ff348a8d99a41e0e9f2ca72fb13f544432d4740532708e9b3b9b9c41abcd80f0eb989456796f82a92d2d8ae34b1413ff87afbc2832c2a75d9aaca4be01baa7", 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) 19:24:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() capget(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)) 19:24:02 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:02 executing program 6: r0 = memfd_create(&(0x7f0000000100)="7c6d1759334e3b64bd7944389deb79c9a09d5422173124569bfce0bad8fc9e3ac90aa2bb20752acfd250ee25a595fb71e1ea654e977d6f9e32394f0904254223e81395ff348a8d99a41e0e9f2ca72fb13f544432d4740532708e9b3b9b9c41abcd80f0eb989456796f82a92d2d8ae34b1413ff87afbc2832c2a75d9aaca4be01baa7", 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) 19:24:02 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000000)=""/219, 0x84417d2a9e6e9e46, &(0x7f0000000480)=""/98, 0x2, 0x2}}, 0x68) 19:24:02 executing program 1: r0 = memfd_create(&(0x7f0000000100)="7c6d1759334e3b64bd7944389deb79c9a09d5422173124569bfce0bad8fc9e3ac90aa2bb20752acfd250ee25a595fb71e1ea654e977d6f9e32394f0904254223e81395ff348a8d99a41e0e9f2ca72fb13f544432d4740532708e9b3b9b9c41abcd80f0eb989456796f82a92d2d8ae34b1413ff87afbc2832c2a75d9aaca4be01baa7", 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) 19:24:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 19:24:02 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x201, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)="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", 0x1000}], 0x1) 19:24:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000010000)="2f0000001800030007fffd946fa283bc8020000000040005031d85680800a3a2d188737e0b00090000001389598e2c", 0x2f}], 0x1}, 0x0) 19:24:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() capget(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)) 19:24:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() capget(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)) 19:24:02 executing program 1: r0 = memfd_create(&(0x7f0000000100)="7c6d1759334e3b64bd7944389deb79c9a09d5422173124569bfce0bad8fc9e3ac90aa2bb20752acfd250ee25a595fb71e1ea654e977d6f9e32394f0904254223e81395ff348a8d99a41e0e9f2ca72fb13f544432d4740532708e9b3b9b9c41abcd80f0eb989456796f82a92d2d8ae34b1413ff87afbc2832c2a75d9aaca4be01baa7", 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) 19:24:02 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000000)=""/219, 0x84417d2a9e6e9e46, &(0x7f0000000480)=""/98, 0x2, 0x2}}, 0x68) 19:24:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000010000)="2f0000001800030007fffd946fa283bc8020000000040005031d85680800a3a2d188737e0b00090000001389598e2c", 0x2f}], 0x1}, 0x0) 19:24:02 executing program 6: r0 = memfd_create(&(0x7f0000000100)="7c6d1759334e3b64bd7944389deb79c9a09d5422173124569bfce0bad8fc9e3ac90aa2bb20752acfd250ee25a595fb71e1ea654e977d6f9e32394f0904254223e81395ff348a8d99a41e0e9f2ca72fb13f544432d4740532708e9b3b9b9c41abcd80f0eb989456796f82a92d2d8ae34b1413ff87afbc2832c2a75d9aaca4be01baa7", 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001}) 19:24:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) close(r0) 19:24:02 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000010000)="2f0000001800030007fffd946fa283bc8020000000040005031d85680800a3a2d188737e0b00090000001389598e2c", 0x2f}], 0x1}, 0x0) 19:24:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:03 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:03 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() capget(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)) 19:24:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x24}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 19:24:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000010000)="2f0000001800030007fffd946fa283bc8020000000040005031d85680800a3a2d188737e0b00090000001389598e2c", 0x2f}], 0x1}, 0x0) 19:24:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x14f) writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 19:24:03 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) mbind(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000500)=0x9, 0x7, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x2, 0x0) 19:24:03 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) mbind(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000500)=0x9, 0x7, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x2, 0x0) 19:24:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x24}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 19:24:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x14f) writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 19:24:03 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) mbind(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000500)=0x9, 0x7, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x2, 0x0) 19:24:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x24}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 19:24:03 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) mbind(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000500)=0x9, 0x7, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x2, 0x0) 19:24:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:04 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x24}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 19:24:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x14f) writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 19:24:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x14f) writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 19:24:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:04 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:04 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x14f) writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 19:24:04 executing program 3: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) mbind(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000500)=0x9, 0x7, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x2, 0x0) 19:24:04 executing program 3: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) mbind(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000500)=0x9, 0x7, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x2, 0x0) 19:24:04 executing program 3: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) mbind(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000500)=0x9, 0x7, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x2, 0x0) 19:24:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) bind(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x80) 19:24:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) bind(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x80) 19:24:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt$inet6_int(r0, 0x3a, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:24:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt$inet6_int(r0, 0x3a, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:24:05 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:05 executing program 7: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r2+30000000}, &(0x7f0000000140), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 19:24:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x14f) writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 19:24:05 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt$inet6_int(r0, 0x3a, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:24:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:05 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/140, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000480)={0x40, 0x7f, 0x10000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f00000003c0)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x9, 0x1, 0x2, 0x0, 0x0, [{r0, 0x0, 0x7ff}, {r0}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000300)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fchmodat(r2, &(0x7f0000000340)='./file0\x00', 0x4) 19:24:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) bind(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x80) 19:24:05 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x100000001) getsockopt$inet6_int(r0, 0x3a, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:24:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) bind(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x80) 19:24:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x3}}) 19:24:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup2(r2, r1) 19:24:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x3}}) 19:24:05 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x3}}) 19:24:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup2(r2, r1) 19:24:06 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x3}}) 19:24:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000100)) 19:24:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x14f) writev(r1, &(0x7f0000001400)=[{&(0x7f0000001380)="b9", 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 19:24:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), 0xffffffffffffff02) 19:24:06 executing program 7: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r2+30000000}, &(0x7f0000000140), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 19:24:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup2(r2, r1) 19:24:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000100)) 19:24:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006506000001ed00001c140000000000006f460000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), 0xffffffffffffff02) 19:24:06 executing program 1: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x401}, 0x2c) 19:24:06 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af12, &(0x7f0000000000)) 19:24:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006506000001ed00001c140000000000006f460000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:06 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af12, &(0x7f0000000000)) 19:24:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000100)) 19:24:06 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), 0xffffffffffffff02) 19:24:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006506000001ed00001c140000000000006f460000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup2(r2, r1) 19:24:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000100)) 19:24:07 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0xb, &(0x7f0000000000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 19:24:07 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af12, &(0x7f0000000000)) 19:24:07 executing program 7: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r2+30000000}, &(0x7f0000000140), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 19:24:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400300000000006506000001ed00001c140000000000006f460000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:07 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), 0xffffffffffffff02) 19:24:07 executing program 1: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x401}, 0x2c) 19:24:07 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r2+30000000}, &(0x7f0000000140), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 19:24:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{0x4c00, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x31, 0x8, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000040)}) 19:24:07 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af12, &(0x7f0000000000)) 19:24:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{0x4c00, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x31, 0x8, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000040)}) 19:24:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x3b}]}) 19:24:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000100), 0x43c5b1d4a85c1795) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 19:24:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="00fd5966cd"], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{0x4c00, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x31, 0x8, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000040)}) 19:24:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x3b}]}) 19:24:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{0x4c00, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x31, 0x8, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000040)}) 19:24:08 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0xb, &(0x7f0000000000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 19:24:08 executing program 1: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x401}, 0x2c) 19:24:08 executing program 7: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r2+30000000}, &(0x7f0000000140), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 19:24:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x3b}]}) 19:24:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="00fd5966cd"], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:08 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) readahead(r0, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 19:24:08 executing program 1: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x401}, 0x2c) 19:24:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000100), 0x43c5b1d4a85c1795) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 19:24:08 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r2+30000000}, &(0x7f0000000140), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 19:24:09 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="00fd5966cd"], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x3b}]}) 19:24:09 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0xb, &(0x7f0000000000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 19:24:09 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) readahead(r0, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 19:24:09 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) readahead(r0, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 19:24:09 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="00fd5966cd"], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:09 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) readahead(r0, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 19:24:11 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0xb, &(0x7f0000000000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 19:24:11 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:24:11 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) readahead(r0, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 19:24:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) readahead(r0, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 19:24:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000100), 0x43c5b1d4a85c1795) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 19:24:11 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, r2+30000000}, &(0x7f0000000140), 0x8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00}, 0x20) 19:24:11 executing program 7: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2715, &(0x7f0000000000), &(0x7f000033bffc)=0xffffffffffffffeb) 19:24:11 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0xb, &(0x7f0000000000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 19:24:11 executing program 7: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2715, &(0x7f0000000000), &(0x7f000033bffc)=0xffffffffffffffeb) 19:24:11 executing program 7: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2715, &(0x7f0000000000), &(0x7f000033bffc)=0xffffffffffffffeb) 19:24:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) readahead(r0, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 19:24:11 executing program 7: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2715, &(0x7f0000000000), &(0x7f000033bffc)=0xffffffffffffffeb) 19:24:11 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000004680)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x4, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000600)}], 0x1, 0x0) 19:24:11 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000004680)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x4, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000600)}], 0x1, 0x0) 19:24:11 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000004680)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x4, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000600)}], 0x1, 0x0) 19:24:11 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000004680)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x4, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000600)}], 0x1, 0x0) 19:24:12 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0xb, &(0x7f0000000000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) [ 500.869866] print_req_error: 16899 callbacks suppressed [ 500.869876] print_req_error: I/O error, dev loop0, sector 0 [ 500.883460] print_req_error: I/O error, dev loop0, sector 17728 [ 500.889963] buffer_io_error: 16899 callbacks suppressed [ 500.889974] Buffer I/O error on dev loop0, logical block 2216, lost async page write 19:24:12 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:24:12 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000004680)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x4, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000600)}], 0x1, 0x0) 19:24:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) accept4(r0, &(0x7f00000001c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f0000000280)=0x80, 0x0) 19:24:12 executing program 2: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000004680)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x4, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000600)}], 0x1, 0x0) 19:24:12 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1) timer_create(0xb, &(0x7f0000000000)={0x0, 0x16}, &(0x7f000004cffc)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x989680}, {0x0, 0x7}}, &(0x7f000004afe0)) 19:24:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000100), 0x43c5b1d4a85c1795) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 19:24:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/123) 19:24:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/123) 19:24:12 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000004680)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x4, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000600)}], 0x1, 0x0) 19:24:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:24:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/123) 19:24:12 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:24:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:24:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/123) 19:24:12 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:24:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 501.964475] print_req_error: I/O error, dev loop0, sector 0 [ 501.976574] print_req_error: I/O error, dev loop0, sector 768 [ 501.982713] Buffer I/O error on dev loop0, logical block 96, lost async page write 19:24:13 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:24:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000020000002d6405000000000065040300010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:13 executing program 3: clock_settime(0xa, &(0x7f0000000080)) 19:24:13 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:24:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003940)=[{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000391000)="83", 0x1}]) 19:24:13 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000580)="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d4281f4f89a11cc821fbf64122a36f6b411c", 0x39, 0x0) 19:24:13 executing program 5: unshare(0x24020400) unshare(0x24020400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x20, &(0x7f0000000440)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 19:24:13 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)='X', 0x1, 0x0) 19:24:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000020000002d6405000000000065040300010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:13 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)='X', 0x1, 0x0) 19:24:13 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000580)="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d4281f4f89a11cc821fbf64122a36f6b411c", 0x39, 0x0) 19:24:13 executing program 7: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x10) 19:24:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003940)=[{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000391000)="83", 0x1}]) 19:24:13 executing program 3: clock_settime(0xa, &(0x7f0000000080)) 19:24:13 executing program 5: unshare(0x24020400) unshare(0x24020400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x20, &(0x7f0000000440)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 19:24:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000020000002d6405000000000065040300010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 502.970990] print_req_error: I/O error, dev loop0, sector 0 [ 502.974622] print_req_error: I/O error, dev loop0, sector 33128 [ 502.983124] Buffer I/O error on dev loop0, logical block 4141, lost async page write 19:24:14 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x45}}, 0x18) acct(&(0x7f0000000180)='./file0\x00') getpid() write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0x0, 0x6, 0x1}}}, 0x28) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000100), 0xffffffff) sendfile(r0, r0, &(0x7f0000000240), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:24:14 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)='X', 0x1, 0x0) 19:24:14 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000580)="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d4281f4f89a11cc821fbf64122a36f6b411c", 0x39, 0x0) 19:24:14 executing program 7: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x10) 19:24:14 executing program 3: clock_settime(0xa, &(0x7f0000000080)) 19:24:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003940)=[{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000391000)="83", 0x1}]) 19:24:14 executing program 5: unshare(0x24020400) unshare(0x24020400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x20, &(0x7f0000000440)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 19:24:14 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000020000002d6405000000000065040300010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:14 executing program 3: clock_settime(0xa, &(0x7f0000000080)) 19:24:14 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)='X', 0x1, 0x0) 19:24:14 executing program 7: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x10) 19:24:14 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000580)="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d4281f4f89a11cc821fbf64122a36f6b411c", 0x39, 0x0) 19:24:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003940)=[{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000391000)="83", 0x1}]) 19:24:14 executing program 5: unshare(0x24020400) unshare(0x24020400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x20, &(0x7f0000000440)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 19:24:14 executing program 0: unshare(0x24020400) unshare(0x24020400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x20, &(0x7f0000000440)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 19:24:14 executing program 1: pipe2(&(0x7f00000000c0), 0x0) userfaultfd(0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 19:24:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa}, r1}}, 0x48) 19:24:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x14}], 0x1, 0x0) 19:24:15 executing program 7: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, &(0x7f0000000000), 0x10) 19:24:15 executing program 0: unshare(0x24020400) unshare(0x24020400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x20, &(0x7f0000000440)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 19:24:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x8040ae9f, &(0x7f0000000180)) 19:24:15 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='autofs\x00', 0x0, &(0x7f00000001c0)) 19:24:15 executing program 1: pipe2(&(0x7f00000000c0), 0x0) userfaultfd(0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 19:24:15 executing program 6: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @empty, 0x0, 0x8800, 'ovf\x00'}, 0x2c) 19:24:15 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa3000000000000070300000cfeffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000cd000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:15 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='autofs\x00', 0x0, &(0x7f00000001c0)) 19:24:15 executing program 0: unshare(0x24020400) unshare(0x24020400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x20, &(0x7f0000000440)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 19:24:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa}, r1}}, 0x48) [ 504.120256] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 19:24:15 executing program 6: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @empty, 0x0, 0x8800, 'ovf\x00'}, 0x2c) 19:24:15 executing program 1: pipe2(&(0x7f00000000c0), 0x0) userfaultfd(0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 19:24:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x8040ae9f, &(0x7f0000000180)) [ 504.248504] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 19:24:15 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa3000000000000070300000cfeffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000cd000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa}, r1}}, 0x48) 19:24:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x14}], 0x1, 0x0) 19:24:16 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='autofs\x00', 0x0, &(0x7f00000001c0)) 19:24:16 executing program 6: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @empty, 0x0, 0x8800, 'ovf\x00'}, 0x2c) 19:24:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xd90}]}) 19:24:16 executing program 1: pipe2(&(0x7f00000000c0), 0x0) userfaultfd(0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 19:24:16 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa}, r1}}, 0x48) 19:24:16 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa3000000000000070300000cfeffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000cd000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x8040ae9f, &(0x7f0000000180)) [ 505.133430] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 19:24:16 executing program 1: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 19:24:16 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b702000000000000bfa3000000000000070300000cfeffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000cd000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:16 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x200100}, 0xfffffeb8) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) 19:24:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x8040ae9f, &(0x7f0000000180)) 19:24:16 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='autofs\x00', 0x0, &(0x7f00000001c0)) 19:24:16 executing program 6: r0 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @empty, 0x0, 0x8800, 'ovf\x00'}, 0x2c) 19:24:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xd90}]}) [ 505.277262] binder_alloc: binder_alloc_mmap_handler: 2624 20000000-20002000 already mapped failed -16 19:24:16 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x200100}, 0xfffffeb8) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) [ 505.347642] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 19:24:17 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "5641c22c53838560ac472c9bafd5cf33b821c62da141ac815efacaafe976d8856e30ae1f6241696870332c8b72e448da7d46fea293102bee25f1da8671470e47", "027ded61190af0532c27f3bf406cbd3a7e15d1d6a37a15c8a54a93e1e9917093"}) 19:24:17 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x200100}, 0xfffffeb8) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) 19:24:17 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000001340)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 19:24:17 executing program 1: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 19:24:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0xc, &(0x7f0000001400)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x14}], 0x1, 0x0) 19:24:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_settings}) 19:24:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xd90}]}) 19:24:17 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "5641c22c53838560ac472c9bafd5cf33b821c62da141ac815efacaafe976d8856e30ae1f6241696870332c8b72e448da7d46fea293102bee25f1da8671470e47", "027ded61190af0532c27f3bf406cbd3a7e15d1d6a37a15c8a54a93e1e9917093"}) 19:24:17 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x200100}, 0xfffffeb8) r0 = socket(0x11, 0x80002, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) 19:24:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_settings}) 19:24:17 executing program 1: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 19:24:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0xc, &(0x7f0000001400)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xd90}]}) 19:24:17 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000001340)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 19:24:17 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "5641c22c53838560ac472c9bafd5cf33b821c62da141ac815efacaafe976d8856e30ae1f6241696870332c8b72e448da7d46fea293102bee25f1da8671470e47", "027ded61190af0532c27f3bf406cbd3a7e15d1d6a37a15c8a54a93e1e9917093"}) 19:24:17 executing program 3: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 19:24:18 executing program 3: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 19:24:18 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000001140)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 19:24:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_settings}) 19:24:18 executing program 1: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 19:24:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0xc, &(0x7f0000001400)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') exit(0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x14}], 0x1, 0x0) 19:24:18 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000001340)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 19:24:18 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "5641c22c53838560ac472c9bafd5cf33b821c62da141ac815efacaafe976d8856e30ae1f6241696870332c8b72e448da7d46fea293102bee25f1da8671470e47", "027ded61190af0532c27f3bf406cbd3a7e15d1d6a37a15c8a54a93e1e9917093"}) 19:24:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_settings}) 19:24:18 executing program 3: r0 = add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) keyctl$read(0xb, r0, &(0x7f00000014c0)=""/4096, 0x1000) 19:24:18 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000001340)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 19:24:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0xc, &(0x7f0000001400)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:18 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000001140)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 19:24:18 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000080)}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000840)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}, 0x20) 19:24:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:18 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000080)}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000840)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}, 0x20) 19:24:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7, 0xffad) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:24:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:19 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000001140)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 19:24:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x4000000000000005, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1) 19:24:19 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000040)="51666e0e3ccf3944b12550862bf9972e7633534d1e53372bd5771e939f7ab16f4e8dc2c1758e70cfd94b05cb68554f5e151f90870098635c06a17024371c23680ca42b6f75be8d8cb427d9b7369c741d31aa7b763fa272625cf1c445a6dac794341c1dd5e047662ceedeae970b5de9", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000227f74)=""/140, 0x0) 19:24:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7, 0xffad) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:24:19 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000080)}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000840)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}, 0x20) 19:24:19 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7, 0xffad) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:24:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x4000000000000005, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1) 19:24:19 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000000e40), 0x0, &(0x7f0000001140)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 19:24:19 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000040)="51666e0e3ccf3944b12550862bf9972e7633534d1e53372bd5771e939f7ab16f4e8dc2c1758e70cfd94b05cb68554f5e151f90870098635c06a17024371c23680ca42b6f75be8d8cb427d9b7369c741d31aa7b763fa272625cf1c445a6dac794341c1dd5e047662ceedeae970b5de9", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000227f74)=""/140, 0x0) 19:24:19 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000080)}, 0xc100) write$binfmt_aout(r0, &(0x7f0000000840)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}, 0x20) 19:24:19 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7, 0xffad) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:24:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7, 0xffad) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:24:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000040)="51666e0e3ccf3944b12550862bf9972e7633534d1e53372bd5771e939f7ab16f4e8dc2c1758e70cfd94b05cb68554f5e151f90870098635c06a17024371c23680ca42b6f75be8d8cb427d9b7369c741d31aa7b763fa272625cf1c445a6dac794341c1dd5e047662ceedeae970b5de9", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000227f74)=""/140, 0x0) 19:24:19 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000040)="51666e0e3ccf3944b12550862bf9972e7633534d1e53372bd5771e939f7ab16f4e8dc2c1758e70cfd94b05cb68554f5e151f90870098635c06a17024371c23680ca42b6f75be8d8cb427d9b7369c741d31aa7b763fa272625cf1c445a6dac794341c1dd5e047662ceedeae970b5de9", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000227f74)=""/140, 0x0) 19:24:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x4000000000000005, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1) 19:24:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:19 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7, 0xffad) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:24:19 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x7, 0xffad) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:24:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000040)="51666e0e3ccf3944b12550862bf9972e7633534d1e53372bd5771e939f7ab16f4e8dc2c1758e70cfd94b05cb68554f5e151f90870098635c06a17024371c23680ca42b6f75be8d8cb427d9b7369c741d31aa7b763fa272625cf1c445a6dac794341c1dd5e047662ceedeae970b5de9", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000227f74)=""/140, 0x0) 19:24:19 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000040)="51666e0e3ccf3944b12550862bf9972e7633534d1e53372bd5771e939f7ab16f4e8dc2c1758e70cfd94b05cb68554f5e151f90870098635c06a17024371c23680ca42b6f75be8d8cb427d9b7369c741d31aa7b763fa272625cf1c445a6dac794341c1dd5e047662ceedeae970b5de9", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000227f74)=""/140, 0x0) 19:24:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x4000000000000005, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1) 19:24:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) 19:24:19 executing program 7: unshare(0x200) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000340)) 19:24:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000040)="51666e0e3ccf3944b12550862bf9972e7633534d1e53372bd5771e939f7ab16f4e8dc2c1758e70cfd94b05cb68554f5e151f90870098635c06a17024371c23680ca42b6f75be8d8cb427d9b7369c741d31aa7b763fa272625cf1c445a6dac794341c1dd5e047662ceedeae970b5de9", 0x0, 0x0) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000b29f57)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000227f74)=""/140, 0x0) 19:24:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x31) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000001480)}}, {{&(0x7f00000014c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001700)}}], 0x2, 0x0) 19:24:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f0000ff5000)={&(0x7f00002a0e50)={0x18, 0x30, 0x3, 0x0, 0x0, {0x400001}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 19:24:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff095ffefd956fa283b724a6008c00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 19:24:20 executing program 7: unshare(0x200) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000340)) 19:24:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x31) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000001480)}}, {{&(0x7f00000014c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001700)}}], 0x2, 0x0) 19:24:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) 19:24:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f0000ff5000)={&(0x7f00002a0e50)={0x18, 0x30, 0x3, 0x0, 0x0, {0x400001}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 19:24:20 executing program 7: unshare(0x200) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000340)) 19:24:20 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff095ffefd956fa283b724a6008c00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 19:24:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x31) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000001480)}}, {{&(0x7f00000014c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001700)}}], 0x2, 0x0) 19:24:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) 19:24:20 executing program 7: unshare(0x200) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000340)) 19:24:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f0000ff5000)={&(0x7f00002a0e50)={0x18, 0x30, 0x3, 0x0, 0x0, {0x400001}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 19:24:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff095ffefd956fa283b724a6008c00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 19:24:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x31) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000001480)}}, {{&(0x7f00000014c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001700)}}], 0x2, 0x0) 19:24:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) 19:24:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) 19:24:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 19:24:20 executing program 4: socket(0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000440)=[{0xc, 0x10000000114, 0x3}], 0xc}, 0x0) 19:24:20 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffc73, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x14000000000443) 19:24:20 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) r2 = dup(0xffffffffffffffff) sendto$inet(r2, &(0x7f0000000580), 0x0, 0x80d0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) fcntl$setown(r0, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x9, 0x20}, &(0x7f0000000200)=0xc) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) fstat(r1, &(0x7f0000000680)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) eventfd2(0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) 19:24:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f0000ff5000)={&(0x7f00002a0e50)={0x18, 0x30, 0x3, 0x0, 0x0, {0x400001}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 19:24:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) 19:24:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getflags(r0, 0x3) 19:24:20 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff095ffefd956fa283b724a6008c00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 19:24:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 19:24:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getflags(r0, 0x3) 19:24:21 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffc73, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x14000000000443) 19:24:21 executing program 4: socket(0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000440)=[{0xc, 0x10000000114, 0x3}], 0xc}, 0x0) 19:24:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r0) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000001fe8)) open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x0) 19:24:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi}]}) 19:24:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 19:24:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) close(r0) 19:24:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi}]}) 19:24:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) close(r0) 19:24:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getflags(r0, 0x3) 19:24:21 executing program 4: socket(0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000440)=[{0xc, 0x10000000114, 0x3}], 0xc}, 0x0) 19:24:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getflags(r0, 0x3) 19:24:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) close(r0) 19:24:21 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffc73, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x14000000000443) 19:24:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xffffffff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 19:24:21 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 19:24:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi}]}) 19:24:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) close(r0) 19:24:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:24:21 executing program 1: r0 = socket$inet6(0xa, 0x40000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@routing={0x0, 0xc, 0x0, 0x0, 0x0, [@empty, @empty, @mcast1={0xff, 0x1, [], 0x1}, @empty, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}]}, 0x68) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 19:24:21 executing program 4: socket(0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000440)=[{0xc, 0x10000000114, 0x3}], 0xc}, 0x0) 19:24:21 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffc73, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/igmp\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x14000000000443) 19:24:21 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 19:24:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) close(r0) 19:24:21 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) close(r0) 19:24:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:24:21 executing program 1: r0 = socket$inet6(0xa, 0x40000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@routing={0x0, 0xc, 0x0, 0x0, 0x0, [@empty, @empty, @mcast1={0xff, 0x1, [], 0x1}, @empty, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}]}, 0x68) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 19:24:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi}]}) 19:24:21 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 19:24:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:24:21 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 19:24:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x51, &(0x7f0000000080), 0x358, &(0x7f00008b2000)}, 0x0) close(r0) 19:24:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000f5ffc)=0xfffffffeffffffff, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) 19:24:21 executing program 1: r0 = socket$inet6(0xa, 0x40000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@routing={0x0, 0xc, 0x0, 0x0, 0x0, [@empty, @empty, @mcast1={0xff, 0x1, [], 0x1}, @empty, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}]}, 0x68) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 19:24:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:24:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:24:21 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 19:24:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16009601000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x17}}) 19:24:22 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 19:24:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:24:22 executing program 1: r0 = socket$inet6(0xa, 0x40000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=@routing={0x0, 0xc, 0x0, 0x0, 0x0, [@empty, @empty, @mcast1={0xff, 0x1, [], 0x1}, @empty, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}]}, 0x68) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 19:24:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000f5ffc)=0xfffffffeffffffff, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) 19:24:22 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16009601000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:22 executing program 6: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x2002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b0e000)) 19:24:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:24:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000f5ffc)=0xfffffffeffffffff, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) 19:24:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 19:24:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x17}}) 19:24:22 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x4000000000000005, 0x100000000007, 0x9, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000001c0), &(0x7f00000011c0)}, 0x20) 19:24:22 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:24:22 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16009601000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) membarrier(0x10, 0x0) 19:24:22 executing program 6: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x2002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b0e000)) 19:24:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x17}}) 19:24:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000f5ffc)=0xfffffffeffffffff, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) 19:24:22 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:24:22 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) membarrier(0x10, 0x0) 19:24:22 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16009601000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 19:24:22 executing program 7: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000100), 0x1) 19:24:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x17}}) 19:24:22 executing program 6: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x2002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b0e000)) 19:24:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x2f4, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_team\x00', 'ip6_vti0\x00', '\x00', 'veth0_to_bond\x00', @random="33610f4949b5", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x1bc, 0x234, 0x264, [@comment={'comment\x00', 0x100}, @pkttype={'pkttype\x00', 0x4, {{0x0, 0x191ebaf2}}}]}, [@arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0xc, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}]}, 0x344) 19:24:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 19:24:23 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:24:23 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) membarrier(0x10, 0x0) 19:24:23 executing program 0: getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00005f1000), &(0x7f0000aff000)=0xc) syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000007000)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 19:24:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fsetxattr(r0, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f0000000100)="5e7a49f4cd5aaaf3066700", 0x0, 0x0) 19:24:23 executing program 7: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000100), 0x1) 19:24:23 executing program 6: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x2002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000b0e000)) 19:24:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x2f4, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_team\x00', 'ip6_vti0\x00', '\x00', 'veth0_to_bond\x00', @random="33610f4949b5", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x1bc, 0x234, 0x264, [@comment={'comment\x00', 0x100}, @pkttype={'pkttype\x00', 0x4, {{0x0, 0x191ebaf2}}}]}, [@arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0xc, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}]}, 0x344) 19:24:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="cd94"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:23 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:24:23 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) membarrier(0x10, 0x0) 19:24:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x2f4, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_team\x00', 'ip6_vti0\x00', '\x00', 'veth0_to_bond\x00', @random="33610f4949b5", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x1bc, 0x234, 0x264, [@comment={'comment\x00', 0x100}, @pkttype={'pkttype\x00', 0x4, {{0x0, 0x191ebaf2}}}]}, [@arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0xc, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}]}, 0x344) 19:24:23 executing program 7: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000100), 0x1) 19:24:23 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 19:24:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x19f) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001, [0x2]}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) 19:24:23 executing program 1: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:24 executing program 7: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000100), 0x1) 19:24:24 executing program 1: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 19:24:24 executing program 0: getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00005f1000), &(0x7f0000aff000)=0xc) syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000007000)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 19:24:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 19:24:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x1, 0x2f4, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_team\x00', 'ip6_vti0\x00', '\x00', 'veth0_to_bond\x00', @random="33610f4949b5", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x1bc, 0x234, 0x264, [@comment={'comment\x00', 0x100}, @pkttype={'pkttype\x00', 0x4, {{0x0, 0x191ebaf2}}}]}, [@arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0xc, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}]}, 0x344) 19:24:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="cd94"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:24 executing program 1: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:24 executing program 7: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:24 executing program 3: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="cd94"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:24 executing program 1: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:24 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 19:24:24 executing program 7: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 19:24:24 executing program 3: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x2f) 19:24:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 19:24:25 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 19:24:25 executing program 0: getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00005f1000), &(0x7f0000aff000)=0xc) syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000007000)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 19:24:25 executing program 7: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:25 executing program 3: r0 = socket(0x4000000000018, 0x0, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001000}, 0x8, &(0x7f0000000080)={&(0x7f0000000380)={0xffffffffffffffa7, r1, 0x8, 0x70bd27, 0x25dfdbfc, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0xe3af}]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x2202, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0xff, 0x3, 0x100, 0x9, 0x4, 0x1, 0x8, 0x80000001, 0xffff, 0x8, 0x7, 0x3}) ioctl$BLKPG(r2, 0x1269, &(0x7f00000004c0)={0x8, 0x8, 0xb1, &(0x7f0000000400)="d05acc3afabf9dfbb5034fed9930549adc0733974039d2b0a832805d758c2614bed5716f180808b771959fd9cac35a3064675ef0ab03e890be83351e0307020b39083827b74a05e4d8a594d309af21b0e569d9ad7964a1b85c946bc0a0e2ef4e72b99febd2d732ce0a4b51fd8a0e95af0de134eb15a1fdd51a8682779da2421b3c526a702ead7336db55cd14e5969ebe5b2c1b7cbc308c4d6f59e3d9224df711ce60a2edc63eb49f4e64f0bb817b022570"}) connect(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x3, @random="8cf550ea6242", 'erspan0\x00'}}, 0xfffffe1d) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x4d1fb70d, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e21, @broadcast=0xffffffff}, 0x2, 0xc846, 0x3ff, 0x81, 0xa625, &(0x7f00000002c0)='syz_tun\x00', 0x101, 0xffffffffffffbe0a, 0x9}) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="9d361d7132843f1857733f38ff47e9a3e9c9a00aa1cb7e1a4a28a65dea699b5e2fbefd10ac03d176a6b37da8b1cf184193369c729e39a909e7cc00938eed7216ece25bfaef6116b22774951398eabc53cdb30cb2c28c1f4befcfcad5bc7e275493979b4b9b15fd91c8ee3467f6b01d31e4fbf7b9", 0x74, 0xfffffffffffffffa) keyctl$setperm(0x5, r3, 0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) 19:24:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="cd94"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 19:24:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x2f) 19:24:25 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000180)={{0x7fffffff, 0x100000000000a}}) 19:24:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x2f) 19:24:25 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0), 0x4) 19:24:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\x00', 0x411}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) pwrite64(r0, &(0x7f0000000200), 0x4, 0x0) 19:24:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 19:24:25 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000180)={{0x7fffffff, 0x100000000000a}}) 19:24:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2d, 0xa, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2000000}, 0x20) 19:24:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x2f) [ 514.520468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.534127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 514.657666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:24:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0xffff000000000000, 0x1, 0x0, [0x0]}}, 0x29) 19:24:26 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0), 0x4) 19:24:26 executing program 0: getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00005f1000), &(0x7f0000aff000)=0xc) syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000007000)) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 19:24:26 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000180)={{0x7fffffff, 0x100000000000a}}) 19:24:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2d, 0xa, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2000000}, 0x20) 19:24:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000fc0)={0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) 19:24:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 19:24:26 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0), 0x4) 19:24:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0xffff000000000000, 0x1, 0x0, [0x0]}}, 0x29) 19:24:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\x00', 0x411}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) pwrite64(r0, &(0x7f0000000200), 0x4, 0x0) 19:24:26 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0), 0x4) 19:24:26 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000180)={{0x7fffffff, 0x100000000000a}}) 19:24:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2d, 0xa, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2000000}, 0x20) 19:24:26 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000fc0)={0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) 19:24:26 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0xffff000000000000, 0x1, 0x0, [0x0]}}, 0x29) [ 515.284708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:24:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 19:24:26 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x20) 19:24:26 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080044dfe, &(0x7f0000001000)) 19:24:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\x00', 0x411}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) pwrite64(r0, &(0x7f0000000200), 0x4, 0x0) 19:24:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c562c067fffff1d3cfbd1220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe80900f800fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 19:24:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 19:24:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x2d, 0xa, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080), 0x2000000}, 0x20) 19:24:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000fc0)={0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) 19:24:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x1, 0xffff000000000000, 0x1, 0x0, [0x0]}}, 0x29) 19:24:27 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x20) 19:24:27 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080044dfe, &(0x7f0000001000)) 19:24:27 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x20) 19:24:27 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000a9fe0000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x20000844) 19:24:27 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000fc0)={0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) 19:24:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) chroot(&(0x7f00000003c0)='./file0\x00') stat(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000240)) stat(&(0x7f0000000640)='./file0/file1\x00', &(0x7f00000005c0)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 19:24:27 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080044dfe, &(0x7f0000001000)) 19:24:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 516.305624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:24:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c562c067fffff1d3cfbd1220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe80900f800fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 19:24:27 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x20) 19:24:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'\x00', 0x411}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) pwrite64(r0, &(0x7f0000000200), 0x4, 0x0) 19:24:28 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080044dfe, &(0x7f0000001000)) 19:24:28 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000280)={0x77359400}, 0x10) 19:24:28 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040), 0x4) 19:24:28 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000a9fe0000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x20000844) 19:24:28 executing program 7: socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 19:24:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c562c067fffff1d3cfbd1220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe80900f800fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 19:24:28 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f000021af98)={0x0, 0x44, 0x42, {0x0, r1+10000000}}) 19:24:28 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040), 0x4) 19:24:28 executing program 7: socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 19:24:28 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000a9fe0000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x20000844) [ 516.876247] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:24:29 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000a9fe0000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x20000844) 19:24:29 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000280)={0x77359400}, 0x10) 19:24:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) chroot(&(0x7f00000003c0)='./file0\x00') stat(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000240)) stat(&(0x7f0000000640)='./file0/file1\x00', &(0x7f00000005c0)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 19:24:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400add427323b470c458c562c067fffff1d3cfbd1220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe80900f800fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 19:24:29 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f000021af98)={0x0, 0x44, 0x42, {0x0, r1+10000000}}) 19:24:29 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040), 0x4) 19:24:29 executing program 7: socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 19:24:29 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 19:24:29 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000280)={0x77359400}, 0x10) 19:24:29 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040), 0x4) 19:24:29 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f000021af98)={0x0, 0x44, 0x42, {0x0, r1+10000000}}) 19:24:29 executing program 7: socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 19:24:29 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 19:24:29 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 19:24:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x48, 0x2}, {}], 0x30) 19:24:29 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000280)={0x77359400}, 0x10) 19:24:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0x40505331, &(0x7f00000004c0)={{}, 'port0\x00'}) 19:24:30 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) chroot(&(0x7f00000003c0)='./file0\x00') stat(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000240)) stat(&(0x7f0000000640)='./file0/file1\x00', &(0x7f00000005c0)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 19:24:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8000000003) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000200)) 19:24:30 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f000021af98)={0x0, 0x44, 0x42, {0x0, r1+10000000}}) 19:24:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x48, 0x2}, {}], 0x30) 19:24:30 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 19:24:30 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 19:24:30 executing program 4: setrlimit(0x7, &(0x7f0000000040)={0x0, 0xfffffffffffffffb}) 19:24:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0x40505331, &(0x7f00000004c0)={{}, 'port0\x00'}) 19:24:30 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000080)={'bond0\x00'}) 19:24:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x48, 0x2}, {}], 0x30) 19:24:30 executing program 4: setrlimit(0x7, &(0x7f0000000040)={0x0, 0xfffffffffffffffb}) 19:24:30 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 19:24:30 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 19:24:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0x40505331, &(0x7f00000004c0)={{}, 'port0\x00'}) 19:24:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8000000003) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000200)) 19:24:30 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000080)={'bond0\x00'}) 19:24:31 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) chroot(&(0x7f00000003c0)='./file0\x00') stat(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000240)) stat(&(0x7f0000000640)='./file0/file1\x00', &(0x7f00000005c0)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 19:24:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x48, 0x2}, {}], 0x30) 19:24:31 executing program 4: setrlimit(0x7, &(0x7f0000000040)={0x0, 0xfffffffffffffffb}) 19:24:31 executing program 0: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0xf) ftruncate(r0, 0x0) 19:24:31 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 19:24:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0x40505331, &(0x7f00000004c0)={{}, 'port0\x00'}) 19:24:31 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000080)={'bond0\x00'}) 19:24:31 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8000000003) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000200)) 19:24:31 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 19:24:31 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000080)={'bond0\x00'}) 19:24:31 executing program 0: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0xf) ftruncate(r0, 0x0) 19:24:31 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 19:24:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:31 executing program 4: setrlimit(0x7, &(0x7f0000000040)={0x0, 0xfffffffffffffffb}) 19:24:31 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x8000000003) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000200)) 19:24:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:32 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 19:24:32 executing program 0: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0xf) ftruncate(r0, 0x0) 19:24:32 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 19:24:32 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:32 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:32 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) 19:24:32 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 19:24:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:32 executing program 0: r0 = memfd_create(&(0x7f0000a32ff6)='/dev/ptmx\x00', 0x2) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0xf) ftruncate(r0, 0x0) 19:24:32 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:32 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:32 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 19:24:32 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) 19:24:32 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) 19:24:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fea000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f3d0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34c7634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000340)=0xffffffffffffffff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:32 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 19:24:32 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) 19:24:32 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:32 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='\x00'}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x193) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1={0xff, 0x1, [], 0x1}, 0x7d}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) 19:24:32 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 19:24:32 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x0) 19:24:32 executing program 7: sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001200)) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x11, r0, 0x0) 19:24:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 19:24:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 19:24:32 executing program 6: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000080)=""/192, &(0x7f0000000140)=0xc0) 19:24:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fea000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f3d0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34c7634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000340)=0xffffffffffffffff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:32 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 19:24:32 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) [ 521.447592] binder: 3719:3720 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:24:32 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) 19:24:32 executing program 7: sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001200)) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x11, r0, 0x0) 19:24:32 executing program 6: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000080)=""/192, &(0x7f0000000140)=0xc0) [ 521.511438] binder_alloc: binder_alloc_mmap_handler: 3719 20001000-20004000 already mapped failed -16 19:24:33 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 521.580228] binder: BINDER_SET_CONTEXT_MGR already set [ 521.600190] binder: 3719:3720 ioctl 40046207 0 returned -16 [ 521.620172] binder_alloc: 3719: binder_alloc_buf, no vma 19:24:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) [ 521.622821] binder: release 3719:3720 transaction 79 out, still active [ 521.626420] binder: 3719:3734 transaction failed 29189/-3, size 24-8 line 2967 [ 521.633239] binder: unexpected work type, 4, not freed [ 521.633246] binder: undelivered TRANSACTION_COMPLETE [ 521.667628] binder: send failed reply for transaction 79, target dead 19:24:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fea000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f3d0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34c7634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000340)=0xffffffffffffffff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:33 executing program 6: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000080)=""/192, &(0x7f0000000140)=0xc0) 19:24:33 executing program 7: sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001200)) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x11, r0, 0x0) 19:24:33 executing program 2: sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001200)) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x11, r0, 0x0) 19:24:33 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) [ 521.867452] binder: undelivered TRANSACTION_ERROR: 29189 19:24:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 19:24:33 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) 19:24:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 19:24:33 executing program 6: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000080)=""/192, &(0x7f0000000140)=0xc0) 19:24:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fea000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c4f3d0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c392c6b4d1b050338f11cc40000000081ff34c7634d9bb9358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50e278e9d90b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd5f0f4020e9dda771d2954f"], &(0x7f0000000140)=0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000340)=0xffffffffffffffff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:33 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) 19:24:33 executing program 7: sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001200)) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x11, r0, 0x0) 19:24:33 executing program 2: sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001200)) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x11, r0, 0x0) [ 522.009957] binder: 3779:3780 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:24:33 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) [ 522.083372] binder: release 3779:3780 transaction 84 out, still active [ 522.090358] binder: unexpected work type, 4, not freed [ 522.095807] binder: undelivered TRANSACTION_COMPLETE 19:24:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 19:24:33 executing program 2: sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001200)) r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mmap$binder(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x11, r0, 0x0) 19:24:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 19:24:33 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) [ 522.158710] binder: send failed reply for transaction 84, target dead [ 522.195390] binder: 3793:3794 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:24:33 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) 19:24:33 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) [ 522.244713] binder: release 3793:3794 transaction 88 out, still active [ 522.251936] binder: unexpected work type, 4, not freed [ 522.257280] binder: undelivered TRANSACTION_COMPLETE [ 522.272931] binder: BINDER_SET_CONTEXT_MGR already set 19:24:33 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 19:24:33 executing program 1: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) [ 522.313535] binder: 3795:3797 ioctl 40046207 0 returned -16 [ 522.337238] binder: send failed reply for transaction 88, target dead [ 522.362853] binder: 3795:3797 transaction failed 29189/-22, size 24-8 line 2852 [ 522.398143] binder: 3815:3816 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 19:24:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='security.capability\x00', 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000040)='^#-*\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000012c0)=@known='security.capability\x00') [ 522.416420] binder: 3795:3797 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 522.448619] binder: release 3815:3816 transaction 93 out, still active [ 522.455618] binder: unexpected work type, 4, not freed [ 522.460994] binder: undelivered TRANSACTION_COMPLETE 19:24:33 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x236, &(0x7f0000000440), 0x375}, 0x10008000) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000040)={0xa}, 0x1c) 19:24:33 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 19:24:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000080)}) 19:24:33 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0x9) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) select(0x8150138, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) [ 522.525356] binder: undelivered TRANSACTION_ERROR: 29189 [ 522.539289] binder: send failed reply for transaction 93, target dead 19:24:34 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) 19:24:34 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) 19:24:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='security.capability\x00', 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000040)='^#-*\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000012c0)=@known='security.capability\x00') [ 522.595792] binder: 3830:3831 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 522.604573] binder: BINDER_SET_CONTEXT_MGR already set [ 522.616625] binder: 3827:3829 ioctl 40046207 0 returned -16 [ 522.668763] binder: 3827:3829 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 522.675738] binder: release 3830:3831 transaction 97 out, still active [ 522.682620] binder: unexpected work type, 4, not freed [ 522.687973] binder: undelivered TRANSACTION_COMPLETE 19:24:34 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0x9) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) select(0x8150138, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) 19:24:34 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x236, &(0x7f0000000440), 0x375}, 0x10008000) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000040)={0xa}, 0x1c) 19:24:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='security.capability\x00', 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000040)='^#-*\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000012c0)=@known='security.capability\x00') 19:24:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='security.capability\x00', 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000040)='^#-*\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000012c0)=@known='security.capability\x00') [ 522.749322] binder: release 3827:3829 transaction 100 out, still active [ 522.756421] binder: unexpected work type, 4, not freed [ 522.761808] binder: undelivered TRANSACTION_COMPLETE 19:24:34 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000862000)={0xfffffffffffff001}) [ 522.795925] binder: send failed reply for transaction 97, target dead [ 522.802943] binder: send failed reply for transaction 100, target dead 19:24:34 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0x9) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) select(0x8150138, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) 19:24:34 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) 19:24:34 executing program 1: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) 19:24:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='security.capability\x00', 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000040)='^#-*\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000012c0)=@known='security.capability\x00') 19:24:34 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000180)) 19:24:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='security.capability\x00', 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000040)='^#-*\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000012c0)=@known='security.capability\x00') 19:24:34 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0x9) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) select(0x8150138, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) 19:24:34 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x236, &(0x7f0000000440), 0x375}, 0x10008000) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000040)={0xa}, 0x1c) 19:24:34 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000862000)={0xfffffffffffff001}) 19:24:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x73, &(0x7f0000ef8fd0), 0x0, &(0x7f0000603000)=""/81, 0x51}, 0x0) 19:24:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='security.capability\x00', 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000040)='^#-*\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000012c0)=@known='security.capability\x00') 19:24:34 executing program 2: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) 19:24:34 executing program 3: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) 19:24:34 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000862000)={0xfffffffffffff001}) 19:24:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x73, &(0x7f0000ef8fd0), 0x0, &(0x7f0000603000)=""/81, 0x51}, 0x0) 19:24:34 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x236, &(0x7f0000000440), 0x375}, 0x10008000) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000040)={0xa}, 0x1c) 19:24:34 executing program 4: socketpair$packet(0x11, 0x3, 0x328, &(0x7f00000001c0)) 19:24:34 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000862000)={0xfffffffffffff001}) 19:24:35 executing program 1: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) 19:24:35 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x800000001}, 0x14}, 0x1}, 0x0) 19:24:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x73, &(0x7f0000ef8fd0), 0x0, &(0x7f0000603000)=""/81, 0x51}, 0x0) 19:24:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') close(r0) 19:24:35 executing program 5: pipe(&(0x7f0000eb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00006dc000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x8000, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) recvmsg(r5, &(0x7f000095cfc8)={&(0x7f0000000680)=ANY=[], 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r4, r5) r6 = gettid() tkill(r6, 0x16) write(r1, &(0x7f00000000c0)="c9", 0x1) 19:24:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x6, 0x4) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x410000) r6 = getegid() setresgid(r4, r5, r6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x4000000000000004, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0x21}, 0x8}}, 0x81, 0x6}, &(0x7f00000004c0)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="cc00000057a8ac18f9cb786d0ff4adcc8563a743b9c0ec8dbeca7e15c01d2710e92cffb433420e488933c39d816e8620fa148ec587b706177b5a2580f080b16b029a0c594879e953b6de2f3220a79e089b3fac788228f167cefe9e9f411da85f7b29cb163bfd83a95cec6192d5f79f89055d483c6a9c5fd5a7744f2294ccf43e97a1a58092227c1031c588af4600b76f1dddee05a357f18d73be5a4dc7b4e8f0aae458b6a38d9d4ee5421516578bd0f7481d3e03eca1a37d2759188311cac8fd252370bd376829a53190356c67d83146"], &(0x7f0000000600)=0x2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000003c0)=r8) listen(r3, 0x9) 19:24:35 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x800000001}, 0x14}, 0x1}, 0x0) 19:24:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') close(r0) 19:24:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x73, &(0x7f0000ef8fd0), 0x0, &(0x7f0000603000)=""/81, 0x51}, 0x0) 19:24:35 executing program 2: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) 19:24:35 executing program 3: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) 19:24:35 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x6, 0x4) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x410000) r6 = getegid() setresgid(r4, r5, r6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x4000000000000004, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0x21}, 0x8}}, 0x81, 0x6}, &(0x7f00000004c0)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="cc00000057a8ac18f9cb786d0ff4adcc8563a743b9c0ec8dbeca7e15c01d2710e92cffb433420e488933c39d816e8620fa148ec587b706177b5a2580f080b16b029a0c594879e953b6de2f3220a79e089b3fac788228f167cefe9e9f411da85f7b29cb163bfd83a95cec6192d5f79f89055d483c6a9c5fd5a7744f2294ccf43e97a1a58092227c1031c588af4600b76f1dddee05a357f18d73be5a4dc7b4e8f0aae458b6a38d9d4ee5421516578bd0f7481d3e03eca1a37d2759188311cac8fd252370bd376829a53190356c67d83146"], &(0x7f0000000600)=0x2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000003c0)=r8) listen(r3, 0x9) 19:24:35 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x800000001}, 0x14}, 0x1}, 0x0) 19:24:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') close(r0) 19:24:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x6, 0x4) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x410000) r6 = getegid() setresgid(r4, r5, r6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x4000000000000004, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0x21}, 0x8}}, 0x81, 0x6}, &(0x7f00000004c0)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="cc00000057a8ac18f9cb786d0ff4adcc8563a743b9c0ec8dbeca7e15c01d2710e92cffb433420e488933c39d816e8620fa148ec587b706177b5a2580f080b16b029a0c594879e953b6de2f3220a79e089b3fac788228f167cefe9e9f411da85f7b29cb163bfd83a95cec6192d5f79f89055d483c6a9c5fd5a7744f2294ccf43e97a1a58092227c1031c588af4600b76f1dddee05a357f18d73be5a4dc7b4e8f0aae458b6a38d9d4ee5421516578bd0f7481d3e03eca1a37d2759188311cac8fd252370bd376829a53190356c67d83146"], &(0x7f0000000600)=0x2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000003c0)=r8) listen(r3, 0x9) 19:24:35 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x800000001}, 0x14}, 0x1}, 0x0) 19:24:36 executing program 1: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) 19:24:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') close(r0) 19:24:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x6, 0x4) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x410000) r6 = getegid() setresgid(r4, r5, r6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x4000000000000004, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0x21}, 0x8}}, 0x81, 0x6}, &(0x7f00000004c0)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="cc00000057a8ac18f9cb786d0ff4adcc8563a743b9c0ec8dbeca7e15c01d2710e92cffb433420e488933c39d816e8620fa148ec587b706177b5a2580f080b16b029a0c594879e953b6de2f3220a79e089b3fac788228f167cefe9e9f411da85f7b29cb163bfd83a95cec6192d5f79f89055d483c6a9c5fd5a7744f2294ccf43e97a1a58092227c1031c588af4600b76f1dddee05a357f18d73be5a4dc7b4e8f0aae458b6a38d9d4ee5421516578bd0f7481d3e03eca1a37d2759188311cac8fd252370bd376829a53190356c67d83146"], &(0x7f0000000600)=0x2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000003c0)=r8) listen(r3, 0x9) 19:24:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x6, 0x4) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x410000) r6 = getegid() setresgid(r4, r5, r6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x4000000000000004, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0x21}, 0x8}}, 0x81, 0x6}, &(0x7f00000004c0)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="cc00000057a8ac18f9cb786d0ff4adcc8563a743b9c0ec8dbeca7e15c01d2710e92cffb433420e488933c39d816e8620fa148ec587b706177b5a2580f080b16b029a0c594879e953b6de2f3220a79e089b3fac788228f167cefe9e9f411da85f7b29cb163bfd83a95cec6192d5f79f89055d483c6a9c5fd5a7744f2294ccf43e97a1a58092227c1031c588af4600b76f1dddee05a357f18d73be5a4dc7b4e8f0aae458b6a38d9d4ee5421516578bd0f7481d3e03eca1a37d2759188311cac8fd252370bd376829a53190356c67d83146"], &(0x7f0000000600)=0x2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000003c0)=r8) listen(r3, 0x9) 19:24:36 executing program 5: pipe(&(0x7f0000eb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00006dc000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x8000, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) recvmsg(r5, &(0x7f000095cfc8)={&(0x7f0000000680)=ANY=[], 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r4, r5) r6 = gettid() tkill(r6, 0x16) write(r1, &(0x7f00000000c0)="c9", 0x1) 19:24:36 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000180)=[{0xc}], 0xc}, 0x0) 19:24:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x6, 0x4) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x410000) r6 = getegid() setresgid(r4, r5, r6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x4000000000000004, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0x21}, 0x8}}, 0x81, 0x6}, &(0x7f00000004c0)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="cc00000057a8ac18f9cb786d0ff4adcc8563a743b9c0ec8dbeca7e15c01d2710e92cffb433420e488933c39d816e8620fa148ec587b706177b5a2580f080b16b029a0c594879e953b6de2f3220a79e089b3fac788228f167cefe9e9f411da85f7b29cb163bfd83a95cec6192d5f79f89055d483c6a9c5fd5a7744f2294ccf43e97a1a58092227c1031c588af4600b76f1dddee05a357f18d73be5a4dc7b4e8f0aae458b6a38d9d4ee5421516578bd0f7481d3e03eca1a37d2759188311cac8fd252370bd376829a53190356c67d83146"], &(0x7f0000000600)=0x2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000003c0)=r8) listen(r3, 0x9) 19:24:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x104) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000340)=0x6, 0x4) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x410000) r6 = getegid() setresgid(r4, r5, r6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x4000000000000004, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, [], 0x21}, 0x8}}, 0x81, 0x6}, &(0x7f00000004c0)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="cc00000057a8ac18f9cb786d0ff4adcc8563a743b9c0ec8dbeca7e15c01d2710e92cffb433420e488933c39d816e8620fa148ec587b706177b5a2580f080b16b029a0c594879e953b6de2f3220a79e089b3fac788228f167cefe9e9f411da85f7b29cb163bfd83a95cec6192d5f79f89055d483c6a9c5fd5a7744f2294ccf43e97a1a58092227c1031c588af4600b76f1dddee05a357f18d73be5a4dc7b4e8f0aae458b6a38d9d4ee5421516578bd0f7481d3e03eca1a37d2759188311cac8fd252370bd376829a53190356c67d83146"], &(0x7f0000000600)=0x2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000003c0)=r8) listen(r3, 0x9) 19:24:36 executing program 2: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) 19:24:36 executing program 3: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'lo\x00', 0x100000001}) r1 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)={0x10}, 0x10}], 0x1, &(0x7f0000000280)}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x1, 0x6, 0x1000, 0x6, 0x0, 0xffffffffffffffc1, 0x8, 0x7, 0x4f6410c0, 0x3f, 0x8}, 0xb) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) 19:24:36 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000180)=[{0xc}], 0xc}, 0x0) 19:24:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x104) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:36 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x104) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) 19:24:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x104) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x104) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:37 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000180)=[{0xc}], 0xc}, 0x0) 19:24:37 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x104) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0xfdfdffff) 19:24:37 executing program 5: pipe(&(0x7f0000eb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00006dc000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x8000, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) recvmsg(r5, &(0x7f000095cfc8)={&(0x7f0000000680)=ANY=[], 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r4, r5) r6 = gettid() tkill(r6, 0x16) write(r1, &(0x7f00000000c0)="c9", 0x1) 19:24:37 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x104) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) 19:24:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0xfdfdffff) 19:24:37 executing program 7: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000180)=[{0xc}], 0xc}, 0x0) 19:24:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4400000000000005, &(0x7f0000000040), 0x0) 19:24:37 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(camellia-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0xffffffffffffff82, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) 19:24:37 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000300)) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000340)=0x3) 19:24:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000087bd32)={0x18, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) 19:24:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0xfdfdffff) 19:24:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4400000000000005, &(0x7f0000000040), 0x0) [ 526.471497] netlink: 'syz-executor6': attribute type 3 has an invalid length. [ 526.503331] netlink: 'syz-executor6': attribute type 3 has an invalid length. 19:24:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) 19:24:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1}]}) 19:24:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4400000000000005, &(0x7f0000000040), 0x0) 19:24:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0xfdfdffff) 19:24:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000087bd32)={0x18, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) 19:24:37 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000300)) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000340)=0x3) [ 526.606724] netlink: 'syz-executor6': attribute type 3 has an invalid length. 19:24:38 executing program 5: pipe(&(0x7f0000eb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00006dc000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x8000, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) recvmsg(r5, &(0x7f000095cfc8)={&(0x7f0000000680)=ANY=[], 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r4, r5) r6 = gettid() tkill(r6, 0x16) write(r1, &(0x7f00000000c0)="c9", 0x1) 19:24:38 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000013000/0x2000)=nil, 0x2000}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x100, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 19:24:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4400000000000005, &(0x7f0000000040), 0x0) 19:24:38 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000300)) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000340)=0x3) 19:24:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000087bd32)={0x18, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) [ 527.125627] netlink: 'syz-executor6': attribute type 3 has an invalid length. 19:24:38 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(camellia-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0xffffffffffffff82, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) 19:24:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1}]}) 19:24:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) 19:24:38 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000300)) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000340)=0x3) 19:24:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000087bd32)={0x18, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0x4, 0x3}]}, 0x18}, 0x1}, 0x0) [ 527.311707] netlink: 'syz-executor6': attribute type 3 has an invalid length. 19:24:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) 19:24:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(camellia-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0xffffffffffffff82, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) 19:24:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) 19:24:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1}]}) 19:24:38 executing program 6: r0 = memfd_create(&(0x7f0000000140)="2f642d1bb382f92f4ab0702ad800ea0383d816885174ce68ebb2c4fb66e1d5e59a539634b54c2fdbb4ecd743edcf0c0115ae21549e55eec65d33dbad7819f0777d790fc3f2ea3b93e9139745d8690c36b6f95cbdd15c190e93050a431b3829e39b7b8b548aec07c92d3bf5356ed17e7fa86542c430266c276119dfad9a616eaac1689e9aa934dc497ba9f30075fb83a2416e1c4e0577cb8131419847876a028c43ed23b82bf24736e5e8883c3292132696e6db6cb0999ee851d3e95330b9b027f505ec567d895a0ac52ef5a7e1979d71e8a6999d3862d3d9be02441319627f6d32edad048012474d9d5a403dc914f8dc629240d1bbd2a33331198ac83aa1e6c229", 0x0) write$eventfd(r0, &(0x7f0000000040)=0xffffffffffffff6f, 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sysfs$1(0x1, &(0x7f0000000000)='self*system+]loposix_acl_accessvboxnet1vboxnet1vmnet1bdev\x00') 19:24:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) [ 527.900736] FAULT_FLAG_ALLOW_RETRY missing 30 [ 527.906106] CPU: 0 PID: 4125 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #48 [ 527.913316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.922900] Call Trace: [ 527.925515] dump_stack+0x1c9/0x2b4 [ 527.929167] ? dump_stack_print_info.cold.2+0x52/0x52 [ 527.934489] ? kasan_check_write+0x14/0x20 [ 527.938746] ? do_raw_spin_lock+0xc1/0x200 [ 527.943109] handle_userfault.cold.33+0x47/0x62 [ 527.947922] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 527.952566] ? trace_hardirqs_on+0x10/0x10 [ 527.956831] ? kasan_check_read+0x11/0x20 [ 527.961008] ? print_usage_bug+0xc0/0xc0 [ 527.965154] ? print_usage_bug+0xc0/0xc0 [ 527.969405] ? userfaultfd_ctx_put+0x810/0x810 [ 527.974104] ? check_memory_region+0x151/0x1b0 [ 527.978711] ? finish_task_switch+0x2ca/0x870 [ 527.983326] ? __lock_acquire+0x7fc/0x5020 [ 527.987673] ? graph_lock+0x170/0x170 [ 527.991599] ? find_held_lock+0x36/0x1c0 [ 527.995701] ? lock_downgrade+0x8f0/0x8f0 [ 527.999891] ? kasan_check_read+0x11/0x20 [ 528.004115] ? do_raw_spin_unlock+0xa7/0x2f0 [ 528.008551] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 528.013165] ? kasan_check_write+0x14/0x20 [ 528.017425] ? do_raw_spin_lock+0xc1/0x200 [ 528.021699] __handle_mm_fault+0x3a0a/0x4460 [ 528.026151] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 528.031038] ? graph_lock+0x170/0x170 [ 528.034862] ? rcu_note_context_switch+0x730/0x730 [ 528.039830] ? lock_downgrade+0x8f0/0x8f0 [ 528.044014] ? kasan_check_read+0x11/0x20 [ 528.048190] ? rcu_is_watching+0x8c/0x150 [ 528.052560] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 528.056997] ? handle_mm_fault+0x8c4/0xc80 [ 528.061338] handle_mm_fault+0x53e/0xc80 [ 528.065458] ? __handle_mm_fault+0x4460/0x4460 [ 528.070342] ? find_vma+0x34/0x190 [ 528.073932] __do_page_fault+0x620/0xe50 [ 528.078020] ? mm_fault_error+0x380/0x380 [ 528.082205] ? trace_hardirqs_on+0x10/0x10 [ 528.086460] ? graph_lock+0x170/0x170 [ 528.090374] do_page_fault+0xf6/0x8c0 [ 528.094219] ? vmalloc_sync_all+0x30/0x30 [ 528.098633] ? find_held_lock+0x36/0x1c0 [ 528.102728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 528.107597] page_fault+0x1e/0x30 [ 528.111075] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 528.116708] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 528.136462] RSP: 0018:ffff8801b10ff958 EFLAGS: 00010202 [ 528.141849] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 528.149131] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801b10ff9f8 [ 528.156414] RBP: ffff8801b10ff990 R08: ffffed003621ff40 R09: ffffed003621ff3f [ 528.164294] R10: ffffed003621ff3f R11: 0000000000000003 R12: 0000000020013004 [ 528.171773] R13: 0000000020013000 R14: ffff8801b10ff9f8 R15: 00007ffffffff000 [ 528.179440] ? _copy_from_user+0x10d/0x150 [ 528.183709] evdev_do_ioctl+0xb69/0x21a0 [ 528.187797] ? str_to_user+0x90/0x90 [ 528.193011] ? rcu_is_watching+0x8c/0x150 [ 528.197210] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 528.201651] ? __fget+0x414/0x670 [ 528.205132] ? expand_files.part.8+0x9c0/0x9c0 [ 528.209746] ? trace_hardirqs_off+0xd/0x10 [ 528.214115] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 528.219240] ? debug_check_no_obj_freed+0x30b/0x595 [ 528.224292] ? fsnotify+0xbb4/0x14e0 [ 528.228027] ? rcu_is_watching+0x8c/0x150 [ 528.234976] ? rcu_pm_notify+0xc0/0xc0 [ 528.239007] ? __fget_light+0x2f7/0x440 [ 528.243108] ? fget_raw+0x20/0x20 [ 528.246599] evdev_ioctl_handler+0x144/0x1a0 [ 528.251379] evdev_ioctl_compat+0x29/0x30 [ 528.255554] ? evdev_ioctl_handler+0x1a0/0x1a0 [ 528.260162] __ia32_compat_sys_ioctl+0x221/0x640 [ 528.264951] do_fast_syscall_32+0x34d/0xfb2 [ 528.269329] ? do_int80_syscall_32+0x890/0x890 [ 528.273954] ? _raw_spin_unlock_irq+0x27/0x70 [ 528.278554] ? finish_task_switch+0x1d3/0x870 [ 528.283075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 528.288721] ? syscall_return_slowpath+0x31d/0x5e0 [ 528.293678] ? sysret32_from_system_call+0x5/0x46 [ 528.298547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 528.303412] entry_SYSENTER_compat+0x70/0x7f [ 528.307833] RIP: 0023:0xf7fe4cb9 [ 528.311203] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 528.330828] RSP: 002b:00000000f5fe00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 528.338561] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000400445a0 [ 528.345848] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 528.353577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 528.361146] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 528.368520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 19:24:41 executing program 6: r0 = memfd_create(&(0x7f0000000140)="2f642d1bb382f92f4ab0702ad800ea0383d816885174ce68ebb2c4fb66e1d5e59a539634b54c2fdbb4ecd743edcf0c0115ae21549e55eec65d33dbad7819f0777d790fc3f2ea3b93e9139745d8690c36b6f95cbdd15c190e93050a431b3829e39b7b8b548aec07c92d3bf5356ed17e7fa86542c430266c276119dfad9a616eaac1689e9aa934dc497ba9f30075fb83a2416e1c4e0577cb8131419847876a028c43ed23b82bf24736e5e8883c3292132696e6db6cb0999ee851d3e95330b9b027f505ec567d895a0ac52ef5a7e1979d71e8a6999d3862d3d9be02441319627f6d32edad048012474d9d5a403dc914f8dc629240d1bbd2a33331198ac83aa1e6c229", 0x0) write$eventfd(r0, &(0x7f0000000040)=0xffffffffffffff6f, 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sysfs$1(0x1, &(0x7f0000000000)='self*system+]loposix_acl_accessvboxnet1vboxnet1vmnet1bdev\x00') 19:24:41 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000013000/0x2000)=nil, 0x2000}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x100, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 19:24:41 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(camellia-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0xffffffffffffff82, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) 19:24:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1}]}) 19:24:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) 19:24:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(camellia-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0xffffffffffffff82, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) 19:24:41 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000013000/0x2000)=nil, 0x2000}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x100, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 19:24:41 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) 19:24:41 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000780)="cd28b7241b7d518de7a4607e1cc8b174a87eea098b02d1f67fb9d3ebfb8cf41a0555e5bdc0a7666898dea323ae54d0ea901042158721cea117c31ac334aa283f4b8143bfb494ccca29e641d96695a9e03b37c474d96e0519a9f466031a257ada8462b14802b9608bd5904f88df9677a58a5853daf91d56cb4fe73c8e16c3f021521057597281b6bc82abdfb913edc734b88fa5392f", 0x95}], 0x1, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip6_vti0\x00') 19:24:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r2 = gettid() ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) dup2(r0, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 19:24:41 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000780)="cd28b7241b7d518de7a4607e1cc8b174a87eea098b02d1f67fb9d3ebfb8cf41a0555e5bdc0a7666898dea323ae54d0ea901042158721cea117c31ac334aa283f4b8143bfb494ccca29e641d96695a9e03b37c474d96e0519a9f466031a257ada8462b14802b9608bd5904f88df9677a58a5853daf91d56cb4fe73c8e16c3f021521057597281b6bc82abdfb913edc734b88fa5392f", 0x95}], 0x1, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip6_vti0\x00') 19:24:41 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000780)="cd28b7241b7d518de7a4607e1cc8b174a87eea098b02d1f67fb9d3ebfb8cf41a0555e5bdc0a7666898dea323ae54d0ea901042158721cea117c31ac334aa283f4b8143bfb494ccca29e641d96695a9e03b37c474d96e0519a9f466031a257ada8462b14802b9608bd5904f88df9677a58a5853daf91d56cb4fe73c8e16c3f021521057597281b6bc82abdfb913edc734b88fa5392f", 0x95}], 0x1, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip6_vti0\x00') 19:24:41 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000780)="cd28b7241b7d518de7a4607e1cc8b174a87eea098b02d1f67fb9d3ebfb8cf41a0555e5bdc0a7666898dea323ae54d0ea901042158721cea117c31ac334aa283f4b8143bfb494ccca29e641d96695a9e03b37c474d96e0519a9f466031a257ada8462b14802b9608bd5904f88df9677a58a5853daf91d56cb4fe73c8e16c3f021521057597281b6bc82abdfb913edc734b88fa5392f", 0x95}], 0x1, &(0x7f0000000800)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip6_vti0\x00') 19:24:41 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x184, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) 19:24:41 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x184, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) 19:24:42 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x184, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) [ 530.963655] FAULT_FLAG_ALLOW_RETRY missing 30 [ 530.968906] CPU: 1 PID: 4205 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #48 [ 530.968921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.986168] Call Trace: [ 530.988796] dump_stack+0x1c9/0x2b4 [ 530.992461] ? dump_stack_print_info.cold.2+0x52/0x52 [ 530.997683] ? kasan_check_write+0x14/0x20 [ 531.001938] ? do_raw_spin_lock+0xc1/0x200 [ 531.006210] handle_userfault.cold.33+0x47/0x62 [ 531.011006] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 531.015730] ? trace_hardirqs_on+0x10/0x10 [ 531.019995] ? kasan_check_read+0x11/0x20 [ 531.024164] ? print_usage_bug+0xc0/0xc0 [ 531.028405] ? print_usage_bug+0xc0/0xc0 [ 531.032607] ? userfaultfd_ctx_put+0x810/0x810 [ 531.037239] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 531.042101] ? finish_task_switch+0x18a/0x870 [ 531.046635] ? __lock_acquire+0x7fc/0x5020 [ 531.050919] ? graph_lock+0x170/0x170 [ 531.054768] ? find_held_lock+0x36/0x1c0 [ 531.059046] ? lock_downgrade+0x8f0/0x8f0 19:24:42 executing program 6: r0 = memfd_create(&(0x7f0000000140)="2f642d1bb382f92f4ab0702ad800ea0383d816885174ce68ebb2c4fb66e1d5e59a539634b54c2fdbb4ecd743edcf0c0115ae21549e55eec65d33dbad7819f0777d790fc3f2ea3b93e9139745d8690c36b6f95cbdd15c190e93050a431b3829e39b7b8b548aec07c92d3bf5356ed17e7fa86542c430266c276119dfad9a616eaac1689e9aa934dc497ba9f30075fb83a2416e1c4e0577cb8131419847876a028c43ed23b82bf24736e5e8883c3292132696e6db6cb0999ee851d3e95330b9b027f505ec567d895a0ac52ef5a7e1979d71e8a6999d3862d3d9be02441319627f6d32edad048012474d9d5a403dc914f8dc629240d1bbd2a33331198ac83aa1e6c229", 0x0) write$eventfd(r0, &(0x7f0000000040)=0xffffffffffffff6f, 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sysfs$1(0x1, &(0x7f0000000000)='self*system+]loposix_acl_accessvboxnet1vboxnet1vmnet1bdev\x00') [ 531.063238] ? kasan_check_read+0x11/0x20 [ 531.067439] ? do_raw_spin_unlock+0xa7/0x2f0 [ 531.071992] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 531.076705] ? kasan_check_write+0x14/0x20 [ 531.081054] ? do_raw_spin_lock+0xc1/0x200 [ 531.085335] __handle_mm_fault+0x3a0a/0x4460 [ 531.089785] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 531.094751] ? graph_lock+0x170/0x170 [ 531.098597] ? lock_downgrade+0x8f0/0x8f0 [ 531.102876] ? kasan_check_read+0x11/0x20 [ 531.107060] ? rcu_is_watching+0x8c/0x150 [ 531.111320] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 531.116020] ? handle_mm_fault+0x8c4/0xc80 [ 531.120332] handle_mm_fault+0x53e/0xc80 [ 531.120352] ? __handle_mm_fault+0x4460/0x4460 [ 531.129156] ? find_vma+0x34/0x190 [ 531.132731] __do_page_fault+0x620/0xe50 [ 531.136848] ? mm_fault_error+0x380/0x380 [ 531.141033] ? trace_hardirqs_on+0x10/0x10 [ 531.145477] ? graph_lock+0x170/0x170 [ 531.149401] do_page_fault+0xf6/0x8c0 [ 531.153230] ? vmalloc_sync_all+0x30/0x30 [ 531.157411] ? find_held_lock+0x36/0x1c0 [ 531.161518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 531.166595] page_fault+0x1e/0x30 [ 531.170263] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 531.175991] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 531.195773] RSP: 0018:ffff88019bb67958 EFLAGS: 00010202 [ 531.201160] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 531.208439] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019bb679f8 [ 531.215892] RBP: ffff88019bb67990 R08: ffffed003376cf40 R09: ffffed003376cf3f [ 531.223362] R10: ffffed003376cf3f R11: 0000000000000003 R12: 0000000020013004 [ 531.230742] R13: 0000000020013000 R14: ffff88019bb679f8 R15: 00007ffffffff000 [ 531.238063] ? _copy_from_user+0x10d/0x150 [ 531.242349] evdev_do_ioctl+0xb69/0x21a0 [ 531.246461] ? str_to_user+0x90/0x90 [ 531.250186] ? kasan_check_read+0x11/0x20 [ 531.254337] ? rcu_is_watching+0x8c/0x150 [ 531.258526] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 531.262976] ? __fget+0x414/0x670 [ 531.266530] ? expand_files.part.8+0x9c0/0x9c0 [ 531.271234] ? trace_hardirqs_off+0xd/0x10 [ 531.275574] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 531.280686] ? debug_check_no_obj_freed+0x30b/0x595 [ 531.285799] ? fsnotify+0xbb4/0x14e0 [ 531.289604] ? rcu_is_watching+0x8c/0x150 [ 531.293864] ? rcu_pm_notify+0xc0/0xc0 [ 531.297787] ? __fget_light+0x2f7/0x440 [ 531.301809] ? fget_raw+0x20/0x20 [ 531.305288] evdev_ioctl_handler+0x144/0x1a0 [ 531.309793] evdev_ioctl_compat+0x29/0x30 [ 531.313947] ? evdev_ioctl_handler+0x1a0/0x1a0 [ 531.318542] __ia32_compat_sys_ioctl+0x221/0x640 [ 531.323403] do_fast_syscall_32+0x34d/0xfb2 [ 531.327752] ? do_int80_syscall_32+0x890/0x890 [ 531.332334] ? _raw_spin_unlock_irq+0x27/0x70 [ 531.336914] ? finish_task_switch+0x1d3/0x870 [ 531.341405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 531.347024] ? syscall_return_slowpath+0x31d/0x5e0 [ 531.352052] ? sysret32_from_system_call+0x5/0x46 [ 531.356896] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 531.361948] entry_SYSENTER_compat+0x70/0x7f [ 531.366347] RIP: 0023:0xf7fe4cb9 [ 531.369700] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 531.389066] RSP: 002b:00000000f5fe00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 531.396866] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000400445a0 [ 531.404137] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.411405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 531.418835] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 531.426095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 19:24:42 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000013000/0x2000)=nil, 0x2000}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x100, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 19:24:42 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(camellia-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0xffffffffffffff82, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) 19:24:42 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x184, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) 19:24:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(camellia-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0xffffffffffffff82, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0x8f}], 0x1}, 0x0) 19:24:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r3, 0x0, 0x2, r2}) dup3(r0, r3, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2}) [ 532.332821] FAULT_FLAG_ALLOW_RETRY missing 30 [ 532.337504] CPU: 0 PID: 4261 Comm: syz-executor5 Not tainted 4.18.0-rc4+ #48 [ 532.337519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.354500] Call Trace: [ 532.357148] dump_stack+0x1c9/0x2b4 [ 532.360892] ? dump_stack_print_info.cold.2+0x52/0x52 [ 532.366176] ? kasan_check_write+0x14/0x20 [ 532.370430] ? do_raw_spin_lock+0xc1/0x200 [ 532.374884] handle_userfault.cold.33+0x47/0x62 [ 532.379677] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 532.384266] ? trace_hardirqs_on+0x10/0x10 [ 532.388520] ? kasan_check_read+0x11/0x20 [ 532.392684] ? print_usage_bug+0xc0/0xc0 [ 532.396799] ? print_usage_bug+0xc0/0xc0 [ 532.400895] ? userfaultfd_ctx_put+0x810/0x810 [ 532.405584] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 532.410442] ? finish_task_switch+0x18a/0x870 [ 532.415078] ? __lock_acquire+0x7fc/0x5020 [ 532.419458] ? graph_lock+0x170/0x170 [ 532.423292] ? find_held_lock+0x36/0x1c0 [ 532.427470] ? lock_downgrade+0x8f0/0x8f0 [ 532.431648] ? kasan_check_read+0x11/0x20 [ 532.435893] ? do_raw_spin_unlock+0xa7/0x2f0 [ 532.440302] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 532.444986] ? kasan_check_write+0x14/0x20 [ 532.449248] ? do_raw_spin_lock+0xc1/0x200 [ 532.453605] __handle_mm_fault+0x3a0a/0x4460 [ 532.458034] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 532.462890] ? graph_lock+0x170/0x170 [ 532.466735] ? lock_downgrade+0x8f0/0x8f0 [ 532.470901] ? kasan_check_read+0x11/0x20 [ 532.475064] ? rcu_is_watching+0x8c/0x150 [ 532.479257] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 532.483697] ? handle_mm_fault+0x8c4/0xc80 [ 532.487958] handle_mm_fault+0x53e/0xc80 [ 532.492055] ? __handle_mm_fault+0x4460/0x4460 [ 532.496870] ? find_vma+0x34/0x190 [ 532.500466] __do_page_fault+0x620/0xe50 [ 532.504645] ? mm_fault_error+0x380/0x380 [ 532.508813] ? trace_hardirqs_on+0x10/0x10 [ 532.513139] ? graph_lock+0x170/0x170 [ 532.517147] do_page_fault+0xf6/0x8c0 [ 532.521078] ? vmalloc_sync_all+0x30/0x30 [ 532.525270] ? find_held_lock+0x36/0x1c0 [ 532.529371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 532.534226] page_fault+0x1e/0x30 [ 532.537690] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 532.543305] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 532.562577] RSP: 0018:ffff880198baf958 EFLAGS: 00010202 [ 532.568221] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 532.575491] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff880198baf9f8 [ 532.582891] RBP: ffff880198baf990 R08: ffffed0033175f40 R09: ffffed0033175f3f [ 532.590214] R10: ffffed0033175f3f R11: 0000000000000003 R12: 0000000020013004 [ 532.597572] R13: 0000000020013000 R14: ffff880198baf9f8 R15: 00007ffffffff000 [ 532.604963] ? _copy_from_user+0x10d/0x150 [ 532.609287] evdev_do_ioctl+0xb69/0x21a0 [ 532.613445] ? str_to_user+0x90/0x90 [ 532.617206] ? kasan_check_read+0x11/0x20 [ 532.621369] ? rcu_is_watching+0x8c/0x150 [ 532.625631] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 532.630166] ? __fget+0x414/0x670 [ 532.633627] ? expand_files.part.8+0x9c0/0x9c0 [ 532.638218] ? trace_hardirqs_off+0xd/0x10 [ 532.642459] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 532.647674] ? debug_check_no_obj_freed+0x30b/0x595 [ 532.652700] ? fsnotify+0xbb4/0x14e0 [ 532.656417] ? rcu_is_watching+0x8c/0x150 [ 532.660561] ? rcu_pm_notify+0xc0/0xc0 [ 532.664445] ? __fget_light+0x2f7/0x440 [ 532.668422] ? fget_raw+0x20/0x20 [ 532.671876] evdev_ioctl_handler+0x144/0x1a0 [ 532.676403] evdev_ioctl_compat+0x29/0x30 [ 532.680665] ? evdev_ioctl_handler+0x1a0/0x1a0 [ 532.685257] __ia32_compat_sys_ioctl+0x221/0x640 [ 532.690124] do_fast_syscall_32+0x34d/0xfb2 [ 532.694468] ? do_int80_syscall_32+0x890/0x890 [ 532.699070] ? _raw_spin_unlock_irq+0x27/0x70 [ 532.703601] ? finish_task_switch+0x1d3/0x870 [ 532.708109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.713665] ? syscall_return_slowpath+0x31d/0x5e0 [ 532.718607] ? sysret32_from_system_call+0x5/0x46 [ 532.723465] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 532.728326] entry_SYSENTER_compat+0x70/0x7f [ 532.732755] RIP: 0023:0xf7f80cb9 [ 532.736208] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 532.755678] RSP: 002b:00000000f5f7c0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 532.763423] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000400445a0 [ 532.770822] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 19:24:44 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000013000/0x2000)=nil, 0x2000}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x100, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 19:24:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r3}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:24:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r2 = gettid() ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) dup2(r0, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 19:24:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r3, 0x0, 0x2, r2}) dup3(r0, r3, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2}) 19:24:44 executing program 6: r0 = memfd_create(&(0x7f0000000140)="2f642d1bb382f92f4ab0702ad800ea0383d816885174ce68ebb2c4fb66e1d5e59a539634b54c2fdbb4ecd743edcf0c0115ae21549e55eec65d33dbad7819f0777d790fc3f2ea3b93e9139745d8690c36b6f95cbdd15c190e93050a431b3829e39b7b8b548aec07c92d3bf5356ed17e7fa86542c430266c276119dfad9a616eaac1689e9aa934dc497ba9f30075fb83a2416e1c4e0577cb8131419847876a028c43ed23b82bf24736e5e8883c3292132696e6db6cb0999ee851d3e95330b9b027f505ec567d895a0ac52ef5a7e1979d71e8a6999d3862d3d9be02441319627f6d32edad048012474d9d5a403dc914f8dc629240d1bbd2a33331198ac83aa1e6c229", 0x0) write$eventfd(r0, &(0x7f0000000040)=0xffffffffffffff6f, 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) sysfs$1(0x1, &(0x7f0000000000)='self*system+]loposix_acl_accessvboxnet1vboxnet1vmnet1bdev\x00') 19:24:44 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r2 = gettid() ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) dup2(r0, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 19:24:44 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000740)) [ 532.778193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.785492] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 532.792765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 19:24:44 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000740)) 19:24:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r3, 0x0, 0x2, r2}) dup3(r0, r3, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2}) 19:24:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r3}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:24:44 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000740)) [ 533.701013] FAULT_FLAG_ALLOW_RETRY missing 30 [ 533.705843] CPU: 0 PID: 4299 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #48 [ 533.705857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.722501] Call Trace: [ 533.725121] dump_stack+0x1c9/0x2b4 [ 533.728771] ? dump_stack_print_info.cold.2+0x52/0x52 [ 533.733984] ? kasan_check_write+0x14/0x20 [ 533.738232] ? do_raw_spin_lock+0xc1/0x200 [ 533.742484] handle_userfault.cold.33+0x47/0x62 [ 533.747267] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 533.751955] ? trace_hardirqs_on+0x10/0x10 [ 533.756303] ? rb_erase+0x3550/0x3550 [ 533.760130] ? perf_trace_lock+0x920/0x920 [ 533.764472] ? print_usage_bug+0xc0/0xc0 [ 533.768563] ? print_usage_bug+0xc0/0xc0 [ 533.772639] ? find_held_lock+0x36/0x1c0 [ 533.776713] ? userfaultfd_ctx_put+0x810/0x810 [ 533.781410] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 533.786286] ? __lock_acquire+0x7fc/0x5020 [ 533.790540] ? graph_lock+0x170/0x170 [ 533.794377] ? find_held_lock+0x36/0x1c0 [ 533.798486] ? lock_downgrade+0x8f0/0x8f0 [ 533.802660] ? kasan_check_read+0x11/0x20 [ 533.807012] ? do_raw_spin_unlock+0xa7/0x2f0 [ 533.811478] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 533.816173] ? kasan_check_write+0x14/0x20 [ 533.820424] ? do_raw_spin_lock+0xc1/0x200 [ 533.824848] __handle_mm_fault+0x3a0a/0x4460 [ 533.829287] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 533.834135] ? graph_lock+0x170/0x170 [ 533.837947] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 533.843177] ? lock_downgrade+0x8f0/0x8f0 [ 533.847562] ? kasan_check_read+0x11/0x20 [ 533.851764] ? rcu_is_watching+0x8c/0x150 [ 533.855937] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 533.860376] ? handle_mm_fault+0x8c4/0xc80 [ 533.864778] handle_mm_fault+0x53e/0xc80 [ 533.868874] ? __handle_mm_fault+0x4460/0x4460 [ 533.873575] ? find_vma+0x34/0x190 [ 533.877139] __do_page_fault+0x620/0xe50 [ 533.881228] ? mm_fault_error+0x380/0x380 [ 533.885504] ? graph_lock+0x170/0x170 [ 533.889326] do_page_fault+0xf6/0x8c0 [ 533.893143] ? __sched_text_start+0x8/0x8 [ 533.897324] ? vmalloc_sync_all+0x30/0x30 [ 533.901498] ? find_held_lock+0x36/0x1c0 [ 533.905595] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 533.910462] page_fault+0x1e/0x30 [ 533.914063] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 533.919692] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 533.939148] RSP: 0018:ffff8801b3dbf958 EFLAGS: 00010202 [ 533.944634] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 533.951910] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801b3dbf9f8 [ 533.959185] RBP: ffff8801b3dbf990 R08: ffffed00367b7f40 R09: ffffed00367b7f3f [ 533.966541] R10: ffffed00367b7f3f R11: 0000000000000003 R12: 0000000020013004 [ 533.973811] R13: 0000000020013000 R14: ffff8801b3dbf9f8 R15: 00007ffffffff000 [ 533.981110] ? _copy_from_user+0x10d/0x150 [ 533.985362] evdev_do_ioctl+0xb69/0x21a0 [ 533.989429] ? str_to_user+0x90/0x90 [ 533.993156] ? kasan_check_read+0x11/0x20 [ 533.997328] ? rcu_is_watching+0x8c/0x150 [ 534.001501] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 534.005937] ? __fget+0x414/0x670 [ 534.009408] ? expand_files.part.8+0x9c0/0x9c0 [ 534.014181] ? trace_hardirqs_off+0xd/0x10 [ 534.018713] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 534.023820] ? debug_check_no_obj_freed+0x30b/0x595 [ 534.028849] ? fsnotify+0xbb4/0x14e0 [ 534.032566] ? rcu_is_watching+0x8c/0x150 [ 534.036728] ? rcu_pm_notify+0xc0/0xc0 [ 534.040620] ? __fget_light+0x2f7/0x440 [ 534.044601] ? fget_raw+0x20/0x20 [ 534.048088] evdev_ioctl_handler+0x144/0x1a0 [ 534.052620] evdev_ioctl_compat+0x29/0x30 [ 534.056848] ? evdev_ioctl_handler+0x1a0/0x1a0 [ 534.061450] __ia32_compat_sys_ioctl+0x221/0x640 [ 534.066311] do_fast_syscall_32+0x34d/0xfb2 [ 534.070649] ? do_int80_syscall_32+0x890/0x890 [ 534.075435] ? _raw_spin_unlock_irq+0x27/0x70 [ 534.079955] ? finish_task_switch+0x1d3/0x870 [ 534.084467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.090014] ? syscall_return_slowpath+0x31d/0x5e0 [ 534.095181] ? sysret32_from_system_call+0x5/0x46 [ 534.100096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 534.104947] entry_SYSENTER_compat+0x70/0x7f [ 534.109363] RIP: 0023:0xf7fe4cb9 [ 534.112717] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 534.132536] RSP: 002b:00000000f5fe00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 534.140256] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000400445a0 19:24:45 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000013000/0x2000)=nil, 0x2000}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x100, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 19:24:45 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r3}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:24:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r2 = gettid() ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) dup2(r0, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 19:24:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r3, 0x0, 0x2, r2}) dup3(r0, r3, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x0, 0x2, r2}) 19:24:45 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r2 = gettid() ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) dup2(r0, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) [ 534.147633] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.154907] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.162277] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 534.169746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 535.034879] FAULT_FLAG_ALLOW_RETRY missing 30 [ 535.039810] CPU: 1 PID: 4335 Comm: syz-executor5 Not tainted 4.18.0-rc4+ #48 [ 535.047146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.047153] Call Trace: [ 535.047180] dump_stack+0x1c9/0x2b4 [ 535.047201] ? dump_stack_print_info.cold.2+0x52/0x52 [ 535.047221] ? kasan_check_write+0x14/0x20 [ 535.047238] ? do_raw_spin_lock+0xc1/0x200 [ 535.047258] handle_userfault.cold.33+0x47/0x62 [ 535.047281] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 535.086321] ? trace_hardirqs_on+0x10/0x10 [ 535.090671] ? graph_lock+0x170/0x170 [ 535.094527] ? print_usage_bug+0xc0/0xc0 [ 535.098621] ? print_usage_bug+0xc0/0xc0 [ 535.102717] ? task_fork_fair+0x680/0x680 [ 535.106881] ? userfaultfd_ctx_put+0x810/0x810 [ 535.111493] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 535.116375] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 535.122465] ? graph_lock+0x170/0x170 [ 535.126365] ? __lock_acquire+0x7fc/0x5020 [ 535.130629] ? graph_lock+0x170/0x170 [ 535.134474] ? find_held_lock+0x36/0x1c0 [ 535.138573] ? lock_downgrade+0x8f0/0x8f0 [ 535.142777] ? kasan_check_read+0x11/0x20 [ 535.146952] ? do_raw_spin_unlock+0xa7/0x2f0 [ 535.151398] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 535.156101] ? kasan_check_write+0x14/0x20 [ 535.160514] ? do_raw_spin_lock+0xc1/0x200 [ 535.164753] __handle_mm_fault+0x3a0a/0x4460 [ 535.169262] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 535.174102] ? graph_lock+0x170/0x170 [ 535.177935] ? lock_downgrade+0x8f0/0x8f0 [ 535.182105] ? kasan_check_read+0x11/0x20 [ 535.186261] ? rcu_is_watching+0x8c/0x150 [ 535.190451] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 535.194873] ? handle_mm_fault+0x8c4/0xc80 [ 535.199225] handle_mm_fault+0x53e/0xc80 [ 535.203316] ? __handle_mm_fault+0x4460/0x4460 [ 535.207921] ? find_vma+0x34/0x190 [ 535.211489] __do_page_fault+0x620/0xe50 [ 535.215580] ? mm_fault_error+0x380/0x380 [ 535.219736] ? trace_hardirqs_on+0x10/0x10 [ 535.223984] ? graph_lock+0x170/0x170 [ 535.227801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.233353] do_page_fault+0xf6/0x8c0 [ 535.237162] ? vmalloc_sync_all+0x30/0x30 [ 535.241333] ? find_held_lock+0x36/0x1c0 [ 535.245425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 535.250284] page_fault+0x1e/0x30 [ 535.253896] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 535.259560] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 535.278811] RSP: 0018:ffff8801c6817958 EFLAGS: 00010202 [ 535.284204] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 535.291526] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801c68179f8 [ 535.298986] RBP: ffff8801c6817990 R08: ffffed0038d02f40 R09: ffffed0038d02f3f [ 535.306358] R10: ffffed0038d02f3f R11: 0000000000000003 R12: 0000000020013004 [ 535.313723] R13: 0000000020013000 R14: ffff8801c68179f8 R15: 00007ffffffff000 [ 535.321029] ? _copy_from_user+0x10d/0x150 [ 535.325278] evdev_do_ioctl+0xb69/0x21a0 [ 535.329372] ? str_to_user+0x90/0x90 [ 535.333101] ? kasan_check_read+0x11/0x20 [ 535.337400] ? rcu_is_watching+0x8c/0x150 [ 535.341665] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 535.346102] ? __fget+0x414/0x670 [ 535.349656] ? expand_files.part.8+0x9c0/0x9c0 [ 535.354243] ? trace_hardirqs_off+0xd/0x10 [ 535.358602] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 535.363730] ? debug_check_no_obj_freed+0x30b/0x595 [ 535.368750] ? fsnotify+0xbb4/0x14e0 [ 535.372574] ? __fget_light+0x2f7/0x440 [ 535.376663] ? fget_raw+0x20/0x20 [ 535.380129] evdev_ioctl_handler+0x144/0x1a0 [ 535.384581] evdev_ioctl_compat+0x29/0x30 [ 535.388747] ? evdev_ioctl_handler+0x1a0/0x1a0 [ 535.393353] __ia32_compat_sys_ioctl+0x221/0x640 [ 535.398224] do_fast_syscall_32+0x34d/0xfb2 [ 535.402591] ? do_int80_syscall_32+0x890/0x890 [ 535.407196] ? _raw_spin_unlock_irq+0x27/0x70 [ 535.411711] ? finish_task_switch+0x1d3/0x870 [ 535.416243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.421897] ? syscall_return_slowpath+0x31d/0x5e0 [ 535.426960] ? sysret32_from_system_call+0x5/0x46 [ 535.431929] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 535.436808] entry_SYSENTER_compat+0x70/0x7f [ 535.441241] RIP: 0023:0xf7f80cb9 [ 535.444611] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 535.463834] RSP: 002b:00000000f5f7c0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 535.471670] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000400445a0 [ 535.479033] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 535.486407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 535.493696] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 535.501059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 19:24:46 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000013000/0x2000)=nil, 0x2000}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x100, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f00000001c0)=0x2) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) 19:24:46 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000740)) 19:24:46 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r3}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:24:46 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000100)="960dad53"}) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x64, 0x2}, [{}]}, 0x3d8) 19:24:46 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r3}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:24:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r2 = gettid() ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) dup2(r0, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 19:24:46 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/128, 0x80}], 0x1) r2 = gettid() ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) splice(0xffffffffffffffff, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0) dup2(r0, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 19:24:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0xc00f}, @void, @ipv6={0x0, 0x6, "8987f2", 0xf9e, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) 19:24:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000100)="960dad53"}) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x64, 0x2}, [{}]}, 0x3d8) 19:24:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000100)="960dad53"}) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x64, 0x2}, [{}]}, 0x3d8) [ 535.705987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:24:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000100)="960dad53"}) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x64, 0x2}, [{}]}, 0x3d8) 19:24:47 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r3}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:24:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000100)="960dad53"}) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x64, 0x2}, [{}]}, 0x3d8) 19:24:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000100)="960dad53"}) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x64, 0x2}, [{}]}, 0x3d8) 19:24:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x174}]}) [ 535.809186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:24:47 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000100)="960dad53"}) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x64, 0x2}, [{}]}, 0x3d8) [ 536.438327] FAULT_FLAG_ALLOW_RETRY missing 30 [ 536.443574] CPU: 0 PID: 4364 Comm: syz-executor1 Not tainted 4.18.0-rc4+ #48 [ 536.451277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.461079] Call Trace: [ 536.461103] dump_stack+0x1c9/0x2b4 [ 536.461126] ? dump_stack_print_info.cold.2+0x52/0x52 [ 536.472641] ? kasan_check_write+0x14/0x20 [ 536.476921] ? do_raw_spin_lock+0xc1/0x200 [ 536.481358] handle_userfault.cold.33+0x47/0x62 [ 536.486373] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 536.491069] ? trace_hardirqs_on+0x10/0x10 [ 536.495340] ? kasan_check_read+0x11/0x20 [ 536.499504] ? print_usage_bug+0xc0/0xc0 [ 536.503682] ? print_usage_bug+0xc0/0xc0 [ 536.507860] ? userfaultfd_ctx_put+0x810/0x810 [ 536.512475] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 536.517334] ? finish_task_switch+0x18a/0x870 [ 536.521915] ? __lock_acquire+0x7fc/0x5020 [ 536.526164] ? graph_lock+0x170/0x170 [ 536.530005] ? find_held_lock+0x36/0x1c0 [ 536.534106] ? lock_downgrade+0x8f0/0x8f0 [ 536.538274] ? kasan_check_read+0x11/0x20 [ 536.542428] ? do_raw_spin_unlock+0xa7/0x2f0 [ 536.546870] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 536.551462] ? kasan_check_write+0x14/0x20 [ 536.555790] ? do_raw_spin_lock+0xc1/0x200 [ 536.560074] __handle_mm_fault+0x3a0a/0x4460 [ 536.564507] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 536.569354] ? graph_lock+0x170/0x170 [ 536.573179] ? lock_downgrade+0x8f0/0x8f0 [ 536.577440] ? kasan_check_read+0x11/0x20 [ 536.581611] ? rcu_is_watching+0x8c/0x150 [ 536.585771] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 536.590197] ? handle_mm_fault+0x8c4/0xc80 [ 536.594447] handle_mm_fault+0x53e/0xc80 [ 536.598616] ? __handle_mm_fault+0x4460/0x4460 [ 536.603229] ? find_vma+0x34/0x190 [ 536.606781] __do_page_fault+0x620/0xe50 [ 536.610863] ? mm_fault_error+0x380/0x380 [ 536.615112] ? trace_hardirqs_on+0x10/0x10 [ 536.619352] ? graph_lock+0x170/0x170 [ 536.623174] do_page_fault+0xf6/0x8c0 [ 536.626989] ? vmalloc_sync_all+0x30/0x30 [ 536.631429] ? find_held_lock+0x36/0x1c0 [ 536.635524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 536.640565] page_fault+0x1e/0x30 [ 536.644043] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 536.649667] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 536.669180] RSP: 0018:ffff8801d8ba7958 EFLAGS: 00010202 [ 536.674557] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 536.681830] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801d8ba79f8 [ 536.689199] RBP: ffff8801d8ba7990 R08: ffffed003b174f40 R09: ffffed003b174f3f [ 536.696661] R10: ffffed003b174f3f R11: 0000000000000003 R12: 0000000020013004 [ 536.704036] R13: 0000000020013000 R14: ffff8801d8ba79f8 R15: 00007ffffffff000 [ 536.711445] ? _copy_from_user+0x10d/0x150 [ 536.715699] evdev_do_ioctl+0xb69/0x21a0 [ 536.719871] ? str_to_user+0x90/0x90 [ 536.723636] ? kasan_check_read+0x11/0x20 [ 536.727800] ? rcu_is_watching+0x8c/0x150 [ 536.731963] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 536.736463] ? __fget+0x414/0x670 [ 536.739974] ? expand_files.part.8+0x9c0/0x9c0 [ 536.744575] ? trace_hardirqs_off+0xd/0x10 [ 536.748827] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 536.753939] ? debug_check_no_obj_freed+0x30b/0x595 [ 536.759017] ? fsnotify+0xbb4/0x14e0 [ 536.762753] ? rcu_is_watching+0x8c/0x150 [ 536.766902] ? rcu_pm_notify+0xc0/0xc0 [ 536.770822] ? __fget_light+0x2f7/0x440 [ 536.774804] ? fget_raw+0x20/0x20 [ 536.778357] evdev_ioctl_handler+0x144/0x1a0 [ 536.782815] evdev_ioctl_compat+0x29/0x30 [ 536.787085] ? evdev_ioctl_handler+0x1a0/0x1a0 [ 536.791676] __ia32_compat_sys_ioctl+0x221/0x640 [ 536.796453] do_fast_syscall_32+0x34d/0xfb2 [ 536.800804] ? do_int80_syscall_32+0x890/0x890 [ 536.805409] ? _raw_spin_unlock_irq+0x27/0x70 [ 536.809994] ? finish_task_switch+0x1d3/0x870 [ 536.814553] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.820185] ? syscall_return_slowpath+0x31d/0x5e0 [ 536.825221] ? sysret32_from_system_call+0x5/0x46 [ 536.830172] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 536.835124] entry_SYSENTER_compat+0x70/0x7f [ 536.839554] RIP: 0023:0xf7fe4cb9 [ 536.842934] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 536.862588] RSP: 002b:00000000f5fe00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 536.870311] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 00000000400445a0 [ 536.877783] RDX: 0000000020013000 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.885169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.892534] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 536.899907] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 19:24:48 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:24:48 executing program 4: setrlimit(0x7, &(0x7f0000000000)={0x14, 0x88}) r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) 19:24:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x174}]}) 19:24:48 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305720, &(0x7f0000000100)) 19:24:48 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="7f", 0x1, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x10c, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r4, r3}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:24:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0xc00f}, @void, @ipv6={0x0, 0x6, "8987f2", 0xf9e, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) 19:24:48 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0xc00f}, @void, @ipv6={0x0, 0x6, "8987f2", 0xf9e, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) 19:24:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x110, 0x4) sendto$inet6(r0, &(0x7f0000000480), 0x13, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xff, 0x4) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001680)}, 0x2000) 19:24:48 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305720, &(0x7f0000000100)) 19:24:48 executing program 4: setrlimit(0x7, &(0x7f0000000000)={0x14, 0x88}) r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) [ 537.066688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:24:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x110, 0x4) sendto$inet6(r0, &(0x7f0000000480), 0x13, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xff, 0x4) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001680)}, 0x2000) 19:24:48 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) [ 537.113373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:24:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x174}]}) 19:24:48 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305720, &(0x7f0000000100)) 19:24:48 executing program 4: setrlimit(0x7, &(0x7f0000000000)={0x14, 0x88}) r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) 19:24:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x110, 0x4) sendto$inet6(r0, &(0x7f0000000480), 0x13, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xff, 0x4) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001680)}, 0x2000) 19:24:48 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:24:48 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:24:48 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305720, &(0x7f0000000100)) 19:24:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x174}]}) 19:24:48 executing program 4: setrlimit(0x7, &(0x7f0000000000)={0x14, 0x88}) r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) 19:24:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0xc00f}, @void, @ipv6={0x0, 0x6, "8987f2", 0xf9e, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) 19:24:49 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0xc00f}, @void, @ipv6={0x0, 0x6, "8987f2", 0xf9e, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) 19:24:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x110, 0x4) sendto$inet6(r0, &(0x7f0000000480), 0x13, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xff, 0x4) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001680)}, 0x2000) 19:24:49 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:24:49 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:24:49 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:24:49 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305720, &(0x7f0000000100)) 19:24:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 19:24:49 executing program 1: sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0x201, 0x0, &(0x7f0000089000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=""/101, &(0x7f0000000280)=0x65) [ 537.886842] binder: 4487:4489 got transaction with invalid offsets ptr 19:24:49 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:24:49 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:24:49 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305720, &(0x7f0000000100)) 19:24:49 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xa], 0x1}, 0xd}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)}, 0x0) [ 537.937511] binder: 4487:4489 transaction failed 29201/-14, size 0-12288 line 2995 [ 537.974567] binder: BINDER_SET_CONTEXT_MGR already set [ 537.998924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.036591] binder: 4487:4507 ioctl 40046207 0 returned -16 19:24:49 executing program 1: sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0x201, 0x0, &(0x7f0000089000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=""/101, &(0x7f0000000280)=0x65) 19:24:49 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0305720, &(0x7f0000000100)) [ 538.066516] binder: undelivered TRANSACTION_ERROR: 29201 [ 538.067010] binder_alloc: 4487: binder_alloc_buf, no vma [ 538.077831] binder: 4487:4489 transaction failed 29189/-3, size 0-12288 line 2967 [ 538.106329] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:24:49 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xa], 0x1}, 0xd}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)}, 0x0) [ 538.234246] binder: undelivered TRANSACTION_ERROR: 29189 19:24:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0xc00f}, @void, @ipv6={0x0, 0x6, "8987f2", 0xf9e, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "53f3f038924236c40dd3f50ef44de3dcb84c932728b27481e1e8b66e4b70c312b27510c002feca1338cd7560334ff926f0be5e15052521b60a76a595c1a59ab50b3c3dda27183c0408ee7f41e89f240eb68e94c1ae243cda6e44aff7a3e2e10519be10550f8f577fc164f7bb08328bb12c07d01f1efa245df37880edb98cad2d725be41b614508ce78db7caad297a5b5bf3279c0ce1cc47cbe22ac7d5bba44e9deef32d62d967efb8b48b83265741dcb65868ef7226f0ff5c4666f1f6be631d33b744b9202901a6e9fbcc62710f7d70db551ada2e95434e57d136f7e8e5121eb810bedc1ec4b132fec3553745a34630fbfa7573f691b9df9ad4927c3c3c09a58f8127853aeac9c31eaa2a86ebc1a15deadb3dafabc5be652846648ad6762b19210ca01673bcd2ce899e85edfaacd9408d61c827f9320c3e395fd082c4728ec7b23057fb70c6c33fb732b994ab93b5b25a95f49228050bdda855c1ff67d2ea3bee0c0b02e6bf940f3aaddef1fb95ed0d4bc7488243326bbbd46f6436457cf5bce808e5c82dbff3869684964948d483ea5df0572d27d62c7f43bfd3b97c1e9b41e328aa3f9e963b6398af6ae69e6c8183f2bf9408dd567b985a917fa98ac1c418fd3cac8646050447aeb78e634fe7afe87caac810585bff7c84446c6c058bdfac5003a59e621cf30f15b99339060d2faf82245878a37100af7dd810626007c63bd5c2e67b1ffdfc4a87f30af2c26ef2acd9126a84bed9a522851ed465262e93741efb879c062101c956835610e9f64165752fe8d3da39ec0067d535bbe9a6ba295bf240af2e6c935af38de0adf6b995eee8113e6faa4cf8c47c75087037930fdae199a98db65b614caae7a6a1443600a5c0a74e7d9e1e07b22dc614b3b907d708249cc358a23fe39f48abb5677b451f54c8cdfa361a8fcb642e00ede263928fd49e21cdf9aebba67cfe2bb3f2437e5f86aacc74b521d253d257d3aee514cc8cd31fe3c4e4f1d2ce77ae9a0d203cb38cd6d96a3eae65e85ae38f26b66a0c1aca770e3aec8e24a8e8e6fa3c1f19858fe72b9f77afb2803e54cef1308178f4ba4bbd8e7541bb520b50c953f95b46c9b1e47c843ea268a200fd4890fef4f1a1358c36642ddb8aadc0809f2e51715574a3af7ec939d5a631597f599a8d7b4ef60c050986240c07a89b7ceac3cd0c7b6f3fe7b623d1764740d83c2e2f85fa2ce9f06f15701fa6794a6400077ea6fbe431e8f0faa61f39454364c099831f627d176f5f31a260bdc23a60dc8140b3b41f5082486479fcc4cc8abe7e1cff193e89ea0a0cd18510b96b0cddcf7296e7a589761944da7a92b3f5feba894ec2c01b1bc52daa3d92a5cf6b74b5e19e8026c5aa8b01c9c8aa687618275d8e92d712d0529d226064dfbf226c5e697ef168157fff4e8ff518675558045451282c96ddf59b2820c1ca5449b73e58cba1fd7e6c271fe5763e4e7d228e1f11cd93ab5ac392e6088dcad1b930c4e86da658ac002f5234e9411df8d12c3e23e6ad3d14d39acd86e1445fff727ed837c3346885133dc6815c25ab872deeacaf78a94aeab2e43f6c83256bbd790a5c86453d12b4213a78cc9bdcad3827da946552ff969526531c2202d55d1fe63dbb4f76452e172ce9205c6368c4c4619b3497fc26614466766f9db61abba466ba9be3391e0961aaefc725337fe8f4e2c37063a7f5924be79f67ed1c85f4367414107a516ff7343669615f51d5d36ae4e1236d798c681f54a4ea8ea26219fe656db118481afcc74e9c8a4ba7ac872932d9f53cfc29cdad024607e391ce54934a355f06cfface26485ac0390987b76c96c8fed910bcadf9c11d414bec62594e3232177fe1d045423567f3cfa99564943be7df2ad0c899d7c2b6896e5fa3c81c23cdaa62dccf843750f2a44316c87fef771231687627f359c594a6bb3b97d33a0c7f99febac9729ed41e3b091e67a1effc2b730e874275b3a3162c29f21803015603654225e38ec4e6a7a880d5b2442649bbe3ec98e5aec894a838266878725ae86da2ed337901351172f1cecdadc0df75dd01dcbb654c28e7a50ca12592956914894ccad7a80d10f2e38399c60d709a55ad6953ef22098a53a8e688cea10785cba2a35dce561db8c318b44b00eac683eb2a3a4bc6c627ebe07d166445b47e1c49fc34f20abbac6484a7cf8e0ce6a8df25fe3b5db1494980e663668566a3c55a126624739f025b2e2096b7cc4da63af3b6a85a3edd70731c6515ba90f209fa34535e543d945fb9f1fd42b5c7fe44cc3f718bd20ec3f4fc2b15568ddc73d892c4293e509a24181561b5ecb48c3169e6505c8a8eabbc5e74cd6267043396d9395b20b103d0a4dfee85d3054b157b0000e43d94275bef62f8626fa42e99c535a1c6a511f3a710f16ac1f66b29844c040fa039951d2b967e53c42950ef74e4395b39e9d2534709de296d636061988dc2dacd43b8eeafba7e4d23640f15967f131d66d800fcdfa91d39267373f559f193756911003aaf743f9a842f22a67a65cc8f3d3e771d6369c027d2dba7a259e43ea960dfba5fdcf7ad078403ec84ec03f11d1ce346789ccdb88d7ffa47c2c86b4a1eaa3b45c39e0ff711afc31b155a2e57a4a06177b0a249ca47c1b8ef51623d79332d0e489b406761fcbc37f526479642e80674d09291f9821b3475d59f97543b45299d28177146c211d67ef72890fe8ab81892740a708bf1a0ba256636add8fb7d75430febe4a93ea7b13c6c73aac9432c34a1e7f6f41b73aa495513f73562352528e8d67a69df045b3056ad16552c2f3e0c1fd383c7f5091d27e2545a0dec962947555cd0ea898f81dc738f9a63b090d430c0a8fb0483494333db1c8ffb48c3496712bbed85c557d5dddeab9a5dc263ee6dd6c3ed7e188564bbf720f17418269c051a4053d8d8a5f90f87e858c7fc89a7bdea2c75378504bdfa7787864ae9849b72ba4caa57bec732d118d0d0817962cfda4cdea391e41dafd4c887662644f4db8fca9bb3876871b6284ecf53a716bb858d19434a960c03c671640773233e3f121e04a03e43eb3312f1a7ec6af64b2985678fb1aba67391e0427d36c37647398e6ec0eca2d7e10f1e05cfeff738b7c32fd0c3973d7034633094f3f22461ef9572adc073e6baf9079ebfafe2e07b1e05094e574970ae81e476012d0b3947bf027f9a96ae8f302669c68f9ef687e0e725f149f8693d85ca780564e1cea50563c17501c4e7f4ea678baba2e7f9b64520fa99ee7916630e873019dc38f83fe661c20427f2e3ef73fc6c598e0cd695d5bd636085d77d976da6f2035c7ff980d68ad746eb76c8dc3fb5d23821f99d1e056e06eb6373b72c5364e7fdb6551e3ac224fecbe0ea877e17c18e91df076ef1cbe2d42219f6e80f1d47805481cfe12937e5b01c6537792032430397ca6de8e387244b4c05547d3cfc0c68b31d497aa4c64059c3b0ad535fab9d9541b36d8290f1ddebd9efd6718efca238d0c6e5215234a1faf03e195ee794d2211f689a2a49bab4d79be77e5315e04d044c04953f8a44a6532e96766ebab76093caf50845ac27d2772b020ea11f1b31c713fbf5d5a450dc549b3449e45dd6b4722941c155696e489ff626f9cbec106e01d500c6df3f188a461372c4f3703212d26070794f4d5c05afde240b76bbd47d19944bd256d4827bd6bac5d2a85820ed38ce86ec0a5d31775f08078471cd6f78f906034e899856c8a76e0e1f613ce1ab3ac5cc51ff7c0d26035c92a4d80586ad363a98fff8e319f27ed94c6a5ab0d7c3409fdc7a28b915c18d7e0691bcb0b537010e1f41e433cd0bbfbe0641fed4fbc34f49cbfe2a0c2e390034108f40e533c94d7a0a3ac3b8d5e6a96ba48b99f8f77e68511f9638c868f03778198153f4e3a8a8a283701d5d77e9d6e5a097ac96f1136005f3e10025c56e2bcabe4822053e5950d6382bdbcbe35150d5ebeeb189001a5fccd3dbed0e5c240c256edb87549239f5172d33f5c758f3bb3db6aae086d527fcb174f3a75a5d1d93947abc35a1f21688e38d8ba2970c6e753a74c29ab6d23e43a933326a47bba86d10b33f003e1298f29db045810fb0f2fc60dcff895c34eb14abee0cf4dec9415285d714826fc411c506feb491d5ddcf3a3b4f86944bf1f306b4376f95de908d5304b0b9f1b867c9d69d1fc5fb0f33ed0878f4cf6dec66877f2307ac6ff9a1c3e71331bd7e4239d3b0f59eda28ec211cf4f11e980d68a6c25b2c71793c9f9baa18c3628c8ab74077c2fa2100cf70be291cacbf82a19647f73063007c53a471b335dc3a2dd4a8a369c67d5f7e95d6762f31ec6801a7cda2c3ab1433cabccd99cf2b30bc6d7dbe2b38fb16a1f52e21b047244a4ecdb32c36b3596da1478da07c209fa2bc09c0c0c3e963f156a48dfbf0b04c2a1ae976fd0295d17dfbd327ca697399774915e1a5e899523f9f18d6cb141033a15a978ce6e284b2446f05beff5840f9236a98db99ba36c02562cd3c0d591f64d55ada94b472967235804e01fddb7dad5e46b63268c91b9742969e44284a673828d7591212a5a0985d891a232c7692f51ffd669ccd656f8d72718134b6b24921e53292fa5ffd74998d578e462612347997a5e69d8405dcfce42c7a6c46821a83552dbd4d527a9117af6449b9d5324ba7133e6c4356dd48f54fb4f4a020a031713c2e38f2c06be2a3926b797ac40f7653426ba8e6db86f03da54f077392b4432acfbc4666653c839a0abceacd9711f7cf3dcba2b2a6c4ef65dcddcea4f59a5316303a58a0b1e423ef67e256da436a1c7afa723cfeb546637c19a9c7af0b2bca5985560a9ee1c04856261b8c2732ff2045928ce1fc1f20e79bdf7854dd07f3138ebfce5b1fb0c1b6f845291a17892aeca3df91808c96db0b8a0fb122e50e6c40b81220d16d04a71cb4ca7500d5ffc0b787eb57e78724ab983e48a31a29d42f6303c20f86c2c1b88a0b7b7f66500e0814df0909b502be61b28b9841e95423f55c7fb91e3a329f870c913453c2490cd3d51f341f1f75a52c413e27755f48fdc23ab49bd29c58a9de4c7c0cec14ee41f49744a2e99c8b2ca42cd8427c8465abe1047771ea69119d9de21cbf2e8b970f4ccd169d5c470db6ed0f7dbb0b7c5b8bb03e947ec06d38fa9df5427649316326b8c02f405e1ef1441bba914ed6782d40729bf8d30c1a0aa178f177afd4569538ca570b05e2d3c8ca2abb6f082b49bdd78a136a8450400e22d28a454d26f605493892c63ab98f1be39a25b84ee9a71618496716ceb9087d8f2cbc8985d2d8fd5e81f5b80138028755adf95c53d35bdbfa1ff468e282d4de79b96ddcad5e5209722518867e5aeb208d0878af7e38bb63b91d6cea29e39e697554e3f80be643d72f9192aab67f50a30bab1e5f37c297ea93740bfde69d21321b45b49eb741987bcf90c75ab1f27f59ce096bbeed8e20dba09b268c7745d3fc88914daa2fc0c2aa77d05a9c1d6877fd176a9ad649299ad21929c022344a99997847f4aed204c5519dc75741c2db03b416439335076af95213582a0c5d8950df6d26cf4cfcb8414c3"}}}}}, 0xfca) 19:24:50 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0xc00f}, @void, @ipv6={0x0, 0x6, "8987f2", 0xf9e, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558, 0x0, "53f3f038924236c40dd3f50ef44de3dcb84c932728b27481e1e8b66e4b70c312b27510c002feca1338cd7560334ff926f0be5e15052521b60a76a595c1a59ab50b3c3dda27183c0408ee7f41e89f240eb68e94c1ae243cda6e44aff7a3e2e10519be10550f8f577fc164f7bb08328bb12c07d01f1efa245df37880edb98cad2d725be41b614508ce78db7caad297a5b5bf3279c0ce1cc47cbe22ac7d5bba44e9deef32d62d967efb8b48b83265741dcb65868ef7226f0ff5c4666f1f6be631d33b744b9202901a6e9fbcc62710f7d70db551ada2e95434e57d136f7e8e5121eb810bedc1ec4b132fec3553745a34630fbfa7573f691b9df9ad4927c3c3c09a58f8127853aeac9c31eaa2a86ebc1a15deadb3dafabc5be652846648ad6762b19210ca01673bcd2ce899e85edfaacd9408d61c827f9320c3e395fd082c4728ec7b23057fb70c6c33fb732b994ab93b5b25a95f49228050bdda855c1ff67d2ea3bee0c0b02e6bf940f3aaddef1fb95ed0d4bc7488243326bbbd46f6436457cf5bce808e5c82dbff3869684964948d483ea5df0572d27d62c7f43bfd3b97c1e9b41e328aa3f9e963b6398af6ae69e6c8183f2bf9408dd567b985a917fa98ac1c418fd3cac8646050447aeb78e634fe7afe87caac810585bff7c84446c6c058bdfac5003a59e621cf30f15b99339060d2faf82245878a37100af7dd810626007c63bd5c2e67b1ffdfc4a87f30af2c26ef2acd9126a84bed9a522851ed465262e93741efb879c062101c956835610e9f64165752fe8d3da39ec0067d535bbe9a6ba295bf240af2e6c935af38de0adf6b995eee8113e6faa4cf8c47c75087037930fdae199a98db65b614caae7a6a1443600a5c0a74e7d9e1e07b22dc614b3b907d708249cc358a23fe39f48abb5677b451f54c8cdfa361a8fcb642e00ede263928fd49e21cdf9aebba67cfe2bb3f2437e5f86aacc74b521d253d257d3aee514cc8cd31fe3c4e4f1d2ce77ae9a0d203cb38cd6d96a3eae65e85ae38f26b66a0c1aca770e3aec8e24a8e8e6fa3c1f19858fe72b9f77afb2803e54cef1308178f4ba4bbd8e7541bb520b50c953f95b46c9b1e47c843ea268a200fd4890fef4f1a1358c36642ddb8aadc0809f2e51715574a3af7ec939d5a631597f599a8d7b4ef60c050986240c07a89b7ceac3cd0c7b6f3fe7b623d1764740d83c2e2f85fa2ce9f06f15701fa6794a6400077ea6fbe431e8f0faa61f39454364c099831f627d176f5f31a260bdc23a60dc8140b3b41f5082486479fcc4cc8abe7e1cff193e89ea0a0cd18510b96b0cddcf7296e7a589761944da7a92b3f5feba894ec2c01b1bc52daa3d92a5cf6b74b5e19e8026c5aa8b01c9c8aa687618275d8e92d712d0529d226064dfbf226c5e697ef168157fff4e8ff518675558045451282c96ddf59b2820c1ca5449b73e58cba1fd7e6c271fe5763e4e7d228e1f11cd93ab5ac392e6088dcad1b930c4e86da658ac002f5234e9411df8d12c3e23e6ad3d14d39acd86e1445fff727ed837c3346885133dc6815c25ab872deeacaf78a94aeab2e43f6c83256bbd790a5c86453d12b4213a78cc9bdcad3827da946552ff969526531c2202d55d1fe63dbb4f76452e172ce9205c6368c4c4619b3497fc26614466766f9db61abba466ba9be3391e0961aaefc725337fe8f4e2c37063a7f5924be79f67ed1c85f4367414107a516ff7343669615f51d5d36ae4e1236d798c681f54a4ea8ea26219fe656db118481afcc74e9c8a4ba7ac872932d9f53cfc29cdad024607e391ce54934a355f06cfface26485ac0390987b76c96c8fed910bcadf9c11d414bec62594e3232177fe1d045423567f3cfa99564943be7df2ad0c899d7c2b6896e5fa3c81c23cdaa62dccf843750f2a44316c87fef771231687627f359c594a6bb3b97d33a0c7f99febac9729ed41e3b091e67a1effc2b730e874275b3a3162c29f21803015603654225e38ec4e6a7a880d5b2442649bbe3ec98e5aec894a838266878725ae86da2ed337901351172f1cecdadc0df75dd01dcbb654c28e7a50ca12592956914894ccad7a80d10f2e38399c60d709a55ad6953ef22098a53a8e688cea10785cba2a35dce561db8c318b44b00eac683eb2a3a4bc6c627ebe07d166445b47e1c49fc34f20abbac6484a7cf8e0ce6a8df25fe3b5db1494980e663668566a3c55a126624739f025b2e2096b7cc4da63af3b6a85a3edd70731c6515ba90f209fa34535e543d945fb9f1fd42b5c7fe44cc3f718bd20ec3f4fc2b15568ddc73d892c4293e509a24181561b5ecb48c3169e6505c8a8eabbc5e74cd6267043396d9395b20b103d0a4dfee85d3054b157b0000e43d94275bef62f8626fa42e99c535a1c6a511f3a710f16ac1f66b29844c040fa039951d2b967e53c42950ef74e4395b39e9d2534709de296d636061988dc2dacd43b8eeafba7e4d23640f15967f131d66d800fcdfa91d39267373f559f193756911003aaf743f9a842f22a67a65cc8f3d3e771d6369c027d2dba7a259e43ea960dfba5fdcf7ad078403ec84ec03f11d1ce346789ccdb88d7ffa47c2c86b4a1eaa3b45c39e0ff711afc31b155a2e57a4a06177b0a249ca47c1b8ef51623d79332d0e489b406761fcbc37f526479642e80674d09291f9821b3475d59f97543b45299d28177146c211d67ef72890fe8ab81892740a708bf1a0ba256636add8fb7d75430febe4a93ea7b13c6c73aac9432c34a1e7f6f41b73aa495513f73562352528e8d67a69df045b3056ad16552c2f3e0c1fd383c7f5091d27e2545a0dec962947555cd0ea898f81dc738f9a63b090d430c0a8fb0483494333db1c8ffb48c3496712bbed85c557d5dddeab9a5dc263ee6dd6c3ed7e188564bbf720f17418269c051a4053d8d8a5f90f87e858c7fc89a7bdea2c75378504bdfa7787864ae9849b72ba4caa57bec732d118d0d0817962cfda4cdea391e41dafd4c887662644f4db8fca9bb3876871b6284ecf53a716bb858d19434a960c03c671640773233e3f121e04a03e43eb3312f1a7ec6af64b2985678fb1aba67391e0427d36c37647398e6ec0eca2d7e10f1e05cfeff738b7c32fd0c3973d7034633094f3f22461ef9572adc073e6baf9079ebfafe2e07b1e05094e574970ae81e476012d0b3947bf027f9a96ae8f302669c68f9ef687e0e725f149f8693d85ca780564e1cea50563c17501c4e7f4ea678baba2e7f9b64520fa99ee7916630e873019dc38f83fe661c20427f2e3ef73fc6c598e0cd695d5bd636085d77d976da6f2035c7ff980d68ad746eb76c8dc3fb5d23821f99d1e056e06eb6373b72c5364e7fdb6551e3ac224fecbe0ea877e17c18e91df076ef1cbe2d42219f6e80f1d47805481cfe12937e5b01c6537792032430397ca6de8e387244b4c05547d3cfc0c68b31d497aa4c64059c3b0ad535fab9d9541b36d8290f1ddebd9efd6718efca238d0c6e5215234a1faf03e195ee794d2211f689a2a49bab4d79be77e5315e04d044c04953f8a44a6532e96766ebab76093caf50845ac27d2772b020ea11f1b31c713fbf5d5a450dc549b3449e45dd6b4722941c155696e489ff626f9cbec106e01d500c6df3f188a461372c4f3703212d26070794f4d5c05afde240b76bbd47d19944bd256d4827bd6bac5d2a85820ed38ce86ec0a5d31775f08078471cd6f78f906034e899856c8a76e0e1f613ce1ab3ac5cc51ff7c0d26035c92a4d80586ad363a98fff8e319f27ed94c6a5ab0d7c3409fdc7a28b915c18d7e0691bcb0b537010e1f41e433cd0bbfbe0641fed4fbc34f49cbfe2a0c2e390034108f40e533c94d7a0a3ac3b8d5e6a96ba48b99f8f77e68511f9638c868f03778198153f4e3a8a8a283701d5d77e9d6e5a097ac96f1136005f3e10025c56e2bcabe4822053e5950d6382bdbcbe35150d5ebeeb189001a5fccd3dbed0e5c240c256edb87549239f5172d33f5c758f3bb3db6aae086d527fcb174f3a75a5d1d93947abc35a1f21688e38d8ba2970c6e753a74c29ab6d23e43a933326a47bba86d10b33f003e1298f29db045810fb0f2fc60dcff895c34eb14abee0cf4dec9415285d714826fc411c506feb491d5ddcf3a3b4f86944bf1f306b4376f95de908d5304b0b9f1b867c9d69d1fc5fb0f33ed0878f4cf6dec66877f2307ac6ff9a1c3e71331bd7e4239d3b0f59eda28ec211cf4f11e980d68a6c25b2c71793c9f9baa18c3628c8ab74077c2fa2100cf70be291cacbf82a19647f73063007c53a471b335dc3a2dd4a8a369c67d5f7e95d6762f31ec6801a7cda2c3ab1433cabccd99cf2b30bc6d7dbe2b38fb16a1f52e21b047244a4ecdb32c36b3596da1478da07c209fa2bc09c0c0c3e963f156a48dfbf0b04c2a1ae976fd0295d17dfbd327ca697399774915e1a5e899523f9f18d6cb141033a15a978ce6e284b2446f05beff5840f9236a98db99ba36c02562cd3c0d591f64d55ada94b472967235804e01fddb7dad5e46b63268c91b9742969e44284a673828d7591212a5a0985d891a232c7692f51ffd669ccd656f8d72718134b6b24921e53292fa5ffd74998d578e462612347997a5e69d8405dcfce42c7a6c46821a83552dbd4d527a9117af6449b9d5324ba7133e6c4356dd48f54fb4f4a020a031713c2e38f2c06be2a3926b797ac40f7653426ba8e6db86f03da54f077392b4432acfbc4666653c839a0abceacd9711f7cf3dcba2b2a6c4ef65dcddcea4f59a5316303a58a0b1e423ef67e256da436a1c7afa723cfeb546637c19a9c7af0b2bca5985560a9ee1c04856261b8c2732ff2045928ce1fc1f20e79bdf7854dd07f3138ebfce5b1fb0c1b6f845291a17892aeca3df91808c96db0b8a0fb122e50e6c40b81220d16d04a71cb4ca7500d5ffc0b787eb57e78724ab983e48a31a29d42f6303c20f86c2c1b88a0b7b7f66500e0814df0909b502be61b28b9841e95423f55c7fb91e3a329f870c913453c2490cd3d51f341f1f75a52c413e27755f48fdc23ab49bd29c58a9de4c7c0cec14ee41f49744a2e99c8b2ca42cd8427c8465abe1047771ea69119d9de21cbf2e8b970f4ccd169d5c470db6ed0f7dbb0b7c5b8bb03e947ec06d38fa9df5427649316326b8c02f405e1ef1441bba914ed6782d40729bf8d30c1a0aa178f177afd4569538ca570b05e2d3c8ca2abb6f082b49bdd78a136a8450400e22d28a454d26f605493892c63ab98f1be39a25b84ee9a71618496716ceb9087d8f2cbc8985d2d8fd5e81f5b80138028755adf95c53d35bdbfa1ff468e282d4de79b96ddcad5e5209722518867e5aeb208d0878af7e38bb63b91d6cea29e39e697554e3f80be643d72f9192aab67f50a30bab1e5f37c297ea93740bfde69d21321b45b49eb741987bcf90c75ab1f27f59ce096bbeed8e20dba09b268c7745d3fc88914daa2fc0c2aa77d05a9c1d6877fd176a9ad649299ad21929c022344a99997847f4aed204c5519dc75741c2db03b416439335076af95213582a0c5d8950df6d26cf4cfcb8414c3"}}}}}, 0xfca) 19:24:50 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) 19:24:50 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) readv(r0, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) 19:24:50 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) close(r0) 19:24:50 executing program 1: sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0x201, 0x0, &(0x7f0000089000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=""/101, &(0x7f0000000280)=0x65) 19:24:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 19:24:50 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xa], 0x1}, 0xd}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)}, 0x0) [ 538.646236] libceph: bad option at './file0' 19:24:50 executing program 1: sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0x201, 0x0, &(0x7f0000089000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=""/101, &(0x7f0000000280)=0x65) 19:24:50 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xa], 0x1}, 0xd}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000380)}, 0x0) [ 538.676793] binder: 4557:4560 got transaction with invalid offsets ptr [ 538.707629] binder: 4557:4560 transaction failed 29201/-14, size 0-12288 line 2995 19:24:50 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) close(r0) 19:24:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="480000001400190d09004beafd0d95010a840600000000000000a2b1ffd3242229a9f5f5a47dc2bc56199faef804008900000020982582104f7d7f0000000101ff0000000309ff5b", 0x48}], 0x1) 19:24:50 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) [ 538.731182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.757192] binder: undelivered TRANSACTION_ERROR: 29201 [ 538.811878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 538.825876] libceph: bad option at './file0' 19:24:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue=0x8350000}) 19:24:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 19:24:50 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) close(r0) [ 539.001350] binder: 4588:4589 got transaction with invalid offsets ptr [ 539.048175] binder: 4588:4589 transaction failed 29201/-14, size 0-12288 line 2995 [ 539.106324] binder: undelivered TRANSACTION_ERROR: 29201 19:24:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue=0x8350000}) 19:24:50 executing program 5: r0 = socket(0xa, 0x80005, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'veth1_to_team\x00'}}, 0x1e) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 19:24:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="480000001400190d09004beafd0d95010a840600000000000000a2b1ffd3242229a9f5f5a47dc2bc56199faef804008900000020982582104f7d7f0000000101ff0000000309ff5b", 0x48}], 0x1) 19:24:50 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) 19:24:50 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) close(r0) 19:24:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 19:24:50 executing program 2: alarm(0x100000001) alarm(0x0) 19:24:50 executing program 7: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x28000000000}) lseek(r0, 0x0, 0x3) 19:24:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue=0x8350000}) [ 539.425250] libceph: bad option at './file0' 19:24:50 executing program 2: alarm(0x100000001) alarm(0x0) 19:24:50 executing program 5: r0 = socket(0xa, 0x80005, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'veth1_to_team\x00'}}, 0x1e) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 19:24:50 executing program 4: alarm(0x100000001) alarm(0x0) [ 539.451815] binder: 4603:4627 got transaction with invalid offsets ptr [ 539.479170] binder: 4603:4627 transaction failed 29201/-14, size 0-12288 line 2995 19:24:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_ivalue=0x8350000}) 19:24:50 executing program 7: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x28000000000}) lseek(r0, 0x0, 0x3) 19:24:50 executing program 6: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) [ 539.534945] binder: undelivered TRANSACTION_ERROR: 29201 19:24:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="480000001400190d09004beafd0d95010a840600000000000000a2b1ffd3242229a9f5f5a47dc2bc56199faef804008900000020982582104f7d7f0000000101ff0000000309ff5b", 0x48}], 0x1) 19:24:51 executing program 2: alarm(0x100000001) alarm(0x0) 19:24:51 executing program 4: alarm(0x100000001) alarm(0x0) 19:24:51 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x28000000000}) lseek(r0, 0x0, 0x3) 19:24:51 executing program 5: r0 = socket(0xa, 0x80005, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'veth1_to_team\x00'}}, 0x1e) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) [ 539.685331] libceph: bad option at './file0' 19:24:51 executing program 7: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x28000000000}) lseek(r0, 0x0, 0x3) 19:24:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x44, &(0x7f00000004c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) 19:24:51 executing program 4: alarm(0x100000001) alarm(0x0) 19:24:51 executing program 2: alarm(0x100000001) alarm(0x0) 19:24:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="480000001400190d09004beafd0d95010a840600000000000000a2b1ffd3242229a9f5f5a47dc2bc56199faef804008900000020982582104f7d7f0000000101ff0000000309ff5b", 0x48}], 0x1) 19:24:51 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x28000000000}) lseek(r0, 0x0, 0x3) 19:24:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 19:24:51 executing program 5: r0 = socket(0xa, 0x80005, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'veth1_to_team\x00'}}, 0x1e) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 19:24:51 executing program 7: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x28000000000}) lseek(r0, 0x0, 0x3) 19:24:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x8001) ppoll(&(0x7f00001b9fb8)=[{r0}], 0x200000000000015c, &(0x7f0000e5d000)={0x0, 0x989680}, &(0x7f000034a000), 0x8) 19:24:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000140)=[0xf71]) 19:24:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x44, &(0x7f00000004c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) 19:24:51 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000000)='/', 0x1, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x28000000000}) lseek(r0, 0x0, 0x3) 19:24:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 19:24:51 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x401}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3f}) 19:24:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), &(0x7f0000000380), &(0x7f00000000c0), 0x8) 19:24:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000140)=[0xf71]) 19:24:51 executing program 0: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x1c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./control\x00') rename(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000003c0)='./control/file0\x00') close(r0) 19:24:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x44, &(0x7f00000004c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) 19:24:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x8001) ppoll(&(0x7f00001b9fb8)=[{r0}], 0x200000000000015c, &(0x7f0000e5d000)={0x0, 0x989680}, &(0x7f000034a000), 0x8) 19:24:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) [ 540.141124] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 19:24:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 19:24:51 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x401}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3f}) 19:24:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000140)=[0xf71]) 19:24:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), &(0x7f0000000380), &(0x7f00000000c0), 0x8) 19:24:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x44, &(0x7f00000004c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) 19:24:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x8001) ppoll(&(0x7f00001b9fb8)=[{r0}], 0x200000000000015c, &(0x7f0000e5d000)={0x0, 0x989680}, &(0x7f000034a000), 0x8) 19:24:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 19:24:51 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x401}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3f}) [ 540.444460] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 19:24:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000140)=[0xf71]) 19:24:51 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), &(0x7f0000000380), &(0x7f00000000c0), 0x8) 19:24:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 19:24:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 540.672959] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 540.701801] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 19:24:52 executing program 0: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x1c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./control\x00') rename(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000003c0)='./control/file0\x00') close(r0) 19:24:52 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x401}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3f}) 19:24:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x8001) ppoll(&(0x7f00001b9fb8)=[{r0}], 0x200000000000015c, &(0x7f0000e5d000)={0x0, 0x989680}, &(0x7f000034a000), 0x8) 19:24:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), &(0x7f0000000380), &(0x7f00000000c0), 0x8) 19:24:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 19:24:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 19:24:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 19:24:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) [ 541.165830] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 541.188683] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 19:24:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0x41) 19:24:52 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$adsp(&(0x7f00000005c0)='/dev/adsp#\x00', 0x3f, 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x8) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x404ffff8000]}) 19:24:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) 19:24:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, &(0x7f00000002c0)) 19:24:52 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) 19:24:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) 19:24:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) [ 541.402122] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 541.403232] syz-executor7: vmalloc: allocation failure: 8631877568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 541.425008] syz-executor7 cpuset=syz7 mems_allowed=0 [ 541.430723] CPU: 1 PID: 4819 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #48 [ 541.437924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.447298] Call Trace: 19:24:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) [ 541.449914] dump_stack+0x1c9/0x2b4 [ 541.453573] ? dump_stack_print_info.cold.2+0x52/0x52 [ 541.458880] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 541.463758] warn_alloc.cold.117+0xb7/0x1bd [ 541.468111] ? zone_watermark_ok_safe+0x3d0/0x3d0 [ 541.472984] ? print_usage_bug+0xc0/0xc0 [ 541.477074] ? __lock_acquire+0x7fc/0x5020 [ 541.481442] ? print_usage_bug+0xc0/0xc0 [ 541.485533] ? update_load_avg+0x2de/0x2590 [ 541.489900] __vmalloc_node_range+0x472/0x760 [ 541.494531] ? lock_acquire+0x1e4/0x540 [ 541.498527] ? graph_lock+0x170/0x170 [ 541.502392] ? kvm_arch_create_memslot+0xc0/0x570 [ 541.507350] __vmalloc_node_flags_caller+0x75/0x90 [ 541.512311] ? kvm_arch_create_memslot+0xc0/0x570 [ 541.517191] kvmalloc_node+0xd7/0xf0 [ 541.520940] kvm_arch_create_memslot+0xc0/0x570 [ 541.525828] __kvm_set_memory_region+0x1d35/0x2e60 [ 541.530881] ? lock_downgrade+0x8f0/0x8f0 [ 541.535065] ? kvm_vcpu_block+0x1070/0x1070 [ 541.539442] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 541.544581] ? visit_groups_merge+0x541/0x6c0 [ 541.549122] ? graph_lock+0x170/0x170 [ 541.553381] ? print_usage_bug+0xc0/0xc0 [ 541.557476] ? trace_hardirqs_on+0x10/0x10 [ 541.561746] ? find_held_lock+0x36/0x1c0 [ 541.565874] ? lock_downgrade+0x8f0/0x8f0 [ 541.570260] kvm_set_memory_region+0x2e/0x50 [ 541.574797] kvm_vm_ioctl+0x664/0x1d80 [ 541.578908] ? kvm_set_memory_region+0x50/0x50 [ 541.583522] ? perf_trace_lock+0x920/0x920 [ 541.587787] ? kasan_check_read+0x11/0x20 [ 541.591966] ? do_raw_spin_unlock+0xa7/0x2f0 [ 541.596399] ? graph_lock+0x170/0x170 [ 541.600228] ? compat_start_thread+0x80/0x80 [ 541.604651] ? _raw_spin_unlock_irq+0x27/0x70 [ 541.609174] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 541.614391] ? trace_hardirqs_on+0xd/0x10 [ 541.618582] ? lock_downgrade+0x8f0/0x8f0 [ 541.622761] ? kasan_check_read+0x11/0x20 [ 541.627105] ? rcu_is_watching+0x8c/0x150 [ 541.631285] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 541.635723] ? __fget+0x414/0x670 [ 541.639205] ? expand_files.part.8+0x9c0/0x9c0 [ 541.643807] ? trace_hardirqs_off+0xd/0x10 [ 541.648063] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 541.653190] ? debug_check_no_obj_freed+0x30b/0x595 [ 541.658245] ? __fget_light+0x2f7/0x440 [ 541.662257] kvm_vm_compat_ioctl+0x143/0x430 [ 541.666705] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 541.670871] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 541.675831] ? exit_to_usermode_loop+0x8c/0x370 [ 541.680534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.686106] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 541.690352] __ia32_compat_sys_ioctl+0x221/0x640 [ 541.695132] do_fast_syscall_32+0x34d/0xfb2 [ 541.699525] ? do_int80_syscall_32+0x890/0x890 [ 541.704117] ? _raw_spin_unlock_irq+0x27/0x70 [ 541.708636] ? finish_task_switch+0x1d3/0x870 [ 541.713223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.718798] ? syscall_return_slowpath+0x31d/0x5e0 [ 541.723842] ? sysret32_from_system_call+0x5/0x46 [ 541.728692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 541.733576] entry_SYSENTER_compat+0x70/0x7f [ 541.738006] RIP: 0023:0xf7faacb9 [ 541.741372] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 541.760868] RSP: 002b:00000000f5fa60ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 541.768592] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 000000004020ae46 [ 541.775874] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.784026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.791322] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 541.798861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.807355] Mem-Info: [ 541.809843] active_anon:30191 inactive_anon:341 isolated_anon:0 [ 541.809843] active_file:4640 inactive_file:13824 isolated_file:0 [ 541.809843] unevictable:0 dirty:77 writeback:0 unstable:0 [ 541.809843] slab_reclaimable:10426 slab_unreclaimable:101875 [ 541.809843] mapped:74269 shmem:349 pagetables:897 bounce:0 [ 541.809843] free:1371007 free_pcp:525 free_cma:0 [ 541.843761] Node 0 active_anon:120764kB inactive_anon:1364kB active_file:18560kB inactive_file:55296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:297076kB dirty:308kB writeback:0kB shmem:1396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 96256kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 541.872110] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 541.899238] lowmem_reserve[]: 0 2827 6331 6331 [ 541.903917] Node 0 DMA32 free:2897968kB min:30100kB low:37624kB high:45148kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2898900kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:932kB local_pcp:712kB free_cma:0kB [ 541.931922] lowmem_reserve[]: 0 0 3504 3504 [ 541.936326] Node 0 Normal free:2570152kB min:37316kB low:46644kB high:55972kB active_anon:120764kB inactive_anon:1364kB active_file:18560kB inactive_file:55296kB unevictable:0kB writepending:308kB present:4718592kB managed:3589008kB mlocked:0kB kernel_stack:5472kB pagetables:3588kB bounce:0kB free_pcp:1160kB local_pcp:496kB free_cma:0kB [ 541.969168] lowmem_reserve[]: 0 0 0 0 [ 541.973061] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 541.986813] Node 0 DMA32: 2*4kB (UM) 3*8kB (UM) 3*16kB (UM) 3*32kB (M) 2*64kB (UM) 4*128kB (UM) 1*256kB (M) 4*512kB (UM) 5*1024kB (UM) 3*2048kB (UM) 704*4096kB (M) = 2897968kB [ 542.003159] Node 0 Normal: 784*4kB (UME) 717*8kB (UME) 1204*16kB (UME) 630*32kB (UME) 288*64kB (UME) 128*128kB (UME) 35*256kB (UME) 104*512kB (UME) 40*1024kB (UME) 2*2048kB (UM) 581*4096kB (UM) = 2570152kB [ 542.021922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 542.030549] 18812 total pagecache pages [ 542.034697] 0 pages in swap cache [ 542.038201] Swap cache stats: add 0, delete 0, find 0/0 [ 542.043725] Free swap = 0kB [ 542.046807] Total swap = 0kB [ 542.049869] 1965969 pages RAM [ 542.053101] 0 pages HighMem/MovableOnly [ 542.057107] 340015 pages reserved [ 542.070642] syz-executor7: vmalloc: allocation failure: 8631877568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 542.082430] syz-executor7 cpuset=syz7 mems_allowed=0 [ 542.087703] CPU: 1 PID: 4819 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #48 [ 542.094922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 19:24:53 executing program 0: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x1c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./control\x00') rename(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000003c0)='./control/file0\x00') close(r0) 19:24:53 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) 19:24:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0x41) 19:24:53 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) 19:24:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) 19:24:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') readv(r0, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) [ 542.104572] Call Trace: [ 542.107190] dump_stack+0x1c9/0x2b4 [ 542.110870] ? dump_stack_print_info.cold.2+0x52/0x52 [ 542.116086] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 542.120967] warn_alloc.cold.117+0xb7/0x1bd [ 542.125318] ? zone_watermark_ok_safe+0x3d0/0x3d0 [ 542.130203] ? __schedule+0x884/0x1ed0 [ 542.134119] ? print_usage_bug+0xc0/0xc0 [ 542.138500] __vmalloc_node_range+0x472/0x760 [ 542.143022] ? lock_acquire+0x1e4/0x540 [ 542.147023] ? graph_lock+0x170/0x170 19:24:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) [ 542.150940] ? kvm_arch_create_memslot+0xc0/0x570 [ 542.155813] __vmalloc_node_flags_caller+0x75/0x90 [ 542.160771] ? kvm_arch_create_memslot+0xc0/0x570 [ 542.165662] kvmalloc_node+0xd7/0xf0 [ 542.169407] kvm_arch_create_memslot+0xc0/0x570 [ 542.174110] __kvm_set_memory_region+0x1d35/0x2e60 [ 542.179214] ? kvm_vcpu_block+0x1070/0x1070 [ 542.183785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.189359] ? futex_wait_queue_me+0x553/0x830 [ 542.194083] ? kasan_check_write+0x14/0x20 [ 542.198518] ? do_raw_spin_lock+0xc1/0x200 [ 542.202787] ? graph_lock+0x170/0x170 [ 542.206644] ? get_futex_value_locked+0xcb/0xf0 [ 542.211440] ? print_usage_bug+0xc0/0xc0 [ 542.215528] ? futex_wait_setup+0x281/0x410 [ 542.219891] ? find_held_lock+0x36/0x1c0 [ 542.223993] ? lock_downgrade+0x8f0/0x8f0 [ 542.228201] kvm_set_memory_region+0x2e/0x50 [ 542.232655] kvm_vm_ioctl+0x664/0x1d80 [ 542.236581] ? kvm_set_memory_region+0x50/0x50 [ 542.241367] ? lock_downgrade+0x8f0/0x8f0 [ 542.245546] ? perf_trace_lock+0x920/0x920 [ 542.249887] ? do_futex+0x249/0x27d0 19:24:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) [ 542.253613] ? rcu_is_watching+0x8c/0x150 [ 542.257789] ? graph_lock+0x170/0x170 [ 542.261613] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 542.266057] ? exit_robust_list+0x290/0x290 [ 542.270422] ? lock_downgrade+0x8f0/0x8f0 [ 542.274599] ? kasan_check_read+0x11/0x20 [ 542.278768] ? rcu_is_watching+0x8c/0x150 [ 542.282937] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 542.287378] ? __fget+0x414/0x670 [ 542.290861] ? expand_files.part.8+0x9c0/0x9c0 [ 542.295479] ? trace_hardirqs_off+0xd/0x10 [ 542.299751] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 542.304921] ? debug_check_no_obj_freed+0x30b/0x595 [ 542.309963] ? rcu_is_watching+0x8c/0x150 [ 542.314163] ? rcu_pm_notify+0xc0/0xc0 [ 542.318357] ? __fget_light+0x2f7/0x440 [ 542.322630] kvm_vm_compat_ioctl+0x143/0x430 [ 542.327204] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 542.331382] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 542.336411] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 542.342312] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 542.346500] __ia32_compat_sys_ioctl+0x221/0x640 [ 542.351425] do_fast_syscall_32+0x34d/0xfb2 19:24:53 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) [ 542.355806] ? do_int80_syscall_32+0x890/0x890 [ 542.360501] ? _raw_spin_unlock_irq+0x27/0x70 [ 542.365018] ? finish_task_switch+0x1d3/0x870 [ 542.369546] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.375156] ? syscall_return_slowpath+0x31d/0x5e0 [ 542.380561] ? sysret32_from_system_call+0x5/0x46 [ 542.385606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 542.390486] entry_SYSENTER_compat+0x70/0x7f [ 542.395093] RIP: 0023:0xf7faacb9 [ 542.398475] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 542.418109] RSP: 002b:00000000f5fa60ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 542.425840] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 000000004020ae46 [ 542.433127] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.440415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.447999] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 542.455292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 19:24:53 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$adsp(&(0x7f00000005c0)='/dev/adsp#\x00', 0x3f, 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x8) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x404ffff8000]}) 19:24:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0x41) 19:24:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) 19:24:53 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 19:24:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) 19:24:53 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) 19:24:53 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) [ 542.665770] syz-executor7: vmalloc: allocation failure: 8631877568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 542.678482] syz-executor7 cpuset=syz7 mems_allowed=0 [ 542.683787] CPU: 0 PID: 4889 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #48 [ 542.691247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.700771] Call Trace: [ 542.703398] dump_stack+0x1c9/0x2b4 [ 542.707174] ? dump_stack_print_info.cold.2+0x52/0x52 [ 542.712597] warn_alloc.cold.117+0xb7/0x1bd [ 542.716956] ? zone_watermark_ok_safe+0x3d0/0x3d0 [ 542.721949] ? __schedule+0x884/0x1ed0 [ 542.725970] ? print_usage_bug+0xc0/0xc0 [ 542.730100] __vmalloc_node_range+0x472/0x760 [ 542.734838] ? lock_acquire+0x1e4/0x540 [ 542.738838] ? graph_lock+0x170/0x170 [ 542.742755] ? kvm_arch_create_memslot+0xc0/0x570 [ 542.747612] __vmalloc_node_flags_caller+0x75/0x90 [ 542.752579] ? kvm_arch_create_memslot+0xc0/0x570 [ 542.757453] kvmalloc_node+0xd7/0xf0 [ 542.761274] kvm_arch_create_memslot+0xc0/0x570 [ 542.766081] __kvm_set_memory_region+0x1d35/0x2e60 [ 542.771054] ? kvm_vcpu_block+0x1070/0x1070 [ 542.775427] ? kasan_check_write+0x14/0x20 [ 542.779694] ? do_raw_spin_lock+0xc1/0x200 [ 542.783967] ? graph_lock+0x170/0x170 [ 542.787799] ? get_futex_value_locked+0xcb/0xf0 [ 542.792657] ? print_usage_bug+0xc0/0xc0 [ 542.796768] ? futex_wait_setup+0x281/0x410 [ 542.801653] ? find_held_lock+0x36/0x1c0 [ 542.805794] ? lock_downgrade+0x8f0/0x8f0 [ 542.810014] kvm_set_memory_region+0x2e/0x50 [ 542.814445] kvm_vm_ioctl+0x664/0x1d80 [ 542.818350] ? perf_trace_lock_acquire+0x4f9/0x9a0 [ 542.823301] ? kvm_set_memory_region+0x50/0x50 [ 542.827912] ? perf_trace_lock+0x920/0x920 [ 542.832153] ? do_futex+0x249/0x27d0 [ 542.835889] ? rcu_is_watching+0x8c/0x150 [ 542.840067] ? graph_lock+0x170/0x170 [ 542.844058] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 542.848569] ? exit_robust_list+0x290/0x290 [ 542.852931] ? lock_downgrade+0x8f0/0x8f0 [ 542.857125] ? kasan_check_read+0x11/0x20 [ 542.861465] ? rcu_is_watching+0x8c/0x150 [ 542.865620] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 542.870056] ? __fget+0x414/0x670 [ 542.873606] ? expand_files.part.8+0x9c0/0x9c0 [ 542.878270] ? trace_hardirqs_off+0xd/0x10 [ 542.882535] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 542.887688] ? debug_check_no_obj_freed+0x30b/0x595 [ 542.892780] ? rcu_is_watching+0x8c/0x150 [ 542.897056] ? __fget_light+0x2f7/0x440 [ 542.901135] kvm_vm_compat_ioctl+0x143/0x430 [ 542.905776] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 542.909938] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 542.914975] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 542.920810] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 542.925081] __ia32_compat_sys_ioctl+0x221/0x640 [ 542.929967] do_fast_syscall_32+0x34d/0xfb2 [ 542.934312] ? do_int80_syscall_32+0x890/0x890 [ 542.938910] ? _raw_spin_unlock_irq+0x27/0x70 [ 542.943511] ? finish_task_switch+0x1d3/0x870 [ 542.948048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.953601] ? syscall_return_slowpath+0x31d/0x5e0 [ 542.958636] ? sysret32_from_system_call+0x5/0x46 [ 542.963506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 542.968470] entry_SYSENTER_compat+0x70/0x7f [ 542.972975] RIP: 0023:0xf7faacb9 [ 542.976348] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 542.996009] RSP: 002b:00000000f5fa60ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 543.003842] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 000000004020ae46 [ 543.011139] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.018508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.025792] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 543.033081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.040909] warn_alloc_show_mem: 1 callbacks suppressed [ 543.040916] Mem-Info: [ 543.048945] active_anon:30208 inactive_anon:337 isolated_anon:0 [ 543.048945] active_file:4640 inactive_file:13824 isolated_file:0 [ 543.048945] unevictable:0 dirty:79 writeback:0 unstable:0 [ 543.048945] slab_reclaimable:10378 slab_unreclaimable:101624 [ 543.048945] mapped:74275 shmem:348 pagetables:880 bounce:0 [ 543.048945] free:1371274 free_pcp:512 free_cma:0 [ 543.082961] Node 0 active_anon:120832kB inactive_anon:1348kB active_file:18560kB inactive_file:55296kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:297100kB dirty:316kB writeback:0kB shmem:1392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 100352kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 543.111633] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 543.138077] lowmem_reserve[]: 0 2827 6331 6331 19:24:54 executing program 0: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x1c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./control/file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./control\x00') rename(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000003c0)='./control/file0\x00') close(r0) 19:24:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) 19:24:54 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 19:24:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') pread64(r0, &(0x7f0000000000)=""/53, 0x35, 0x41) 19:24:54 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) 19:24:54 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a00000200000000000000000000003d6c73576b6b6b00f983bbc52ea536363a56e18ba4ddb2dc721ebe6e5033b36d1b4ed835a4e5b01f0db2a5060fdc9e07708088b970a6928dc0c9add5d4f607d22054b01f5e618afbfefa58868e2d7fa68869c77a00d683ba873d090b7c0b0c4630fd5fe9b1516f44645602aba9dccfb115616a6fc3d4b79fee7c22a4e74c7828a246e74e01e4ab143983c4af45d24388922b174196d55347289711ca08b2acf7c2260ecbb8f629c7987614"], 0xbb}, 0x1}, 0x0) [ 543.142817] Node 0 DMA32 free:2897968kB min:30100kB low:37624kB high:45148kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2898900kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:932kB local_pcp:220kB free_cma:0kB [ 543.170795] lowmem_reserve[]: 0 0 3504 3504 [ 543.175268] Node 0 Normal free:2562424kB min:37316kB low:46644kB high:55972kB active_anon:129256kB inactive_anon:1348kB active_file:18560kB inactive_file:55296kB unevictable:0kB writepending:316kB present:4718592kB managed:3589008kB mlocked:0kB kernel_stack:5792kB pagetables:3964kB bounce:0kB free_pcp:704kB local_pcp:524kB free_cma:0kB [ 543.205650] lowmem_reserve[]: 0 0 0 0 19:24:54 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) [ 543.209583] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 543.223471] Node 0 DMA32: 2*4kB (UM) 3*8kB (UM) 3*16kB (UM) 3*32kB (M) 2*64kB (UM) 4*128kB (UM) 1*256kB (M) 4*512kB (UM) 5*1024kB (UM) 3*2048kB (UM) 704*4096kB (M) = 2897968kB [ 543.239840] Node 0 Normal: 592*4kB (UME) 687*8kB (ME) 1140*16kB (UME) 631*32kB (UME) 290*64kB (UME) 136*128kB (UME) 36*256kB (UME) 104*512kB (UME) 40*1024kB (UME) 1*2048kB (U) 580*4096kB (UM) = 2563416kB [ 543.258626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 19:24:54 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 19:24:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) [ 543.267484] 18811 total pagecache pages [ 543.271635] 0 pages in swap cache [ 543.275197] Swap cache stats: add 0, delete 0, find 0/0 [ 543.280623] Free swap = 0kB [ 543.283833] Total swap = 0kB [ 543.286925] 1965969 pages RAM [ 543.290127] 0 pages HighMem/MovableOnly [ 543.294171] 340015 pages reserved 19:24:54 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$adsp(&(0x7f00000005c0)='/dev/adsp#\x00', 0x3f, 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x8) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x404ffff8000]}) 19:24:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) 19:24:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) 19:24:54 executing program 4: mlockall(0x2) io_setup(0x800, &(0x7f0000000140)) 19:24:54 executing program 6: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x5}}}}}, 0x0) 19:24:54 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 19:24:54 executing program 6: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x5}}}}}, 0x0) [ 543.526579] syz-executor7: vmalloc: allocation failure: 8631877568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 543.538986] syz-executor7 cpuset=syz7 mems_allowed=0 [ 543.544288] CPU: 0 PID: 4938 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #48 [ 543.551515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.561002] Call Trace: [ 543.563633] dump_stack+0x1c9/0x2b4 [ 543.567310] ? dump_stack_print_info.cold.2+0x52/0x52 [ 543.572810] warn_alloc.cold.117+0xb7/0x1bd [ 543.577480] ? zone_watermark_ok_safe+0x3d0/0x3d0 [ 543.582412] ? __schedule+0x884/0x1ed0 [ 543.586429] ? print_usage_bug+0xc0/0xc0 [ 543.590751] __vmalloc_node_range+0x472/0x760 [ 543.595387] ? lock_acquire+0x1e4/0x540 [ 543.599402] ? graph_lock+0x170/0x170 [ 543.603259] ? kvm_arch_create_memslot+0xc0/0x570 [ 543.608144] __vmalloc_node_flags_caller+0x75/0x90 [ 543.613112] ? kvm_arch_create_memslot+0xc0/0x570 [ 543.618096] kvmalloc_node+0xd7/0xf0 [ 543.621862] kvm_arch_create_memslot+0xc0/0x570 [ 543.626591] __kvm_set_memory_region+0x1d35/0x2e60 [ 543.631684] ? kvm_vcpu_block+0x1070/0x1070 [ 543.636168] ? kasan_check_write+0x14/0x20 [ 543.640558] ? do_raw_spin_lock+0xc1/0x200 [ 543.644898] ? graph_lock+0x170/0x170 [ 543.648905] ? get_futex_value_locked+0xcb/0xf0 [ 543.653650] ? print_usage_bug+0xc0/0xc0 [ 543.657898] ? futex_wait_setup+0x281/0x410 [ 543.662310] ? find_held_lock+0x36/0x1c0 [ 543.666442] ? lock_downgrade+0x8f0/0x8f0 [ 543.670817] kvm_set_memory_region+0x2e/0x50 [ 543.675277] kvm_vm_ioctl+0x664/0x1d80 [ 543.679212] ? perf_trace_lock_acquire+0x4f9/0x9a0 [ 543.684184] ? kvm_set_memory_region+0x50/0x50 [ 543.688854] ? perf_trace_lock+0x920/0x920 [ 543.693254] ? do_futex+0x249/0x27d0 [ 543.696977] ? rcu_is_watching+0x8c/0x150 [ 543.701142] ? graph_lock+0x170/0x170 [ 543.705159] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 543.709622] ? exit_robust_list+0x290/0x290 [ 543.714035] ? lock_downgrade+0x8f0/0x8f0 [ 543.718254] ? kasan_check_read+0x11/0x20 [ 543.722414] ? rcu_is_watching+0x8c/0x150 [ 543.726592] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 543.731149] ? __fget+0x414/0x670 [ 543.734641] ? expand_files.part.8+0x9c0/0x9c0 [ 543.739267] ? trace_hardirqs_off+0xd/0x10 [ 543.743631] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 543.748772] ? debug_check_no_obj_freed+0x30b/0x595 [ 543.753843] ? rcu_is_watching+0x8c/0x150 [ 543.758042] ? __fget_light+0x2f7/0x440 [ 543.762077] kvm_vm_compat_ioctl+0x143/0x430 [ 543.766527] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 543.770703] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 543.775675] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 543.781420] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 543.785587] __ia32_compat_sys_ioctl+0x221/0x640 [ 543.790389] do_fast_syscall_32+0x34d/0xfb2 [ 543.794857] ? do_int80_syscall_32+0x890/0x890 [ 543.799466] ? _raw_spin_unlock_irq+0x27/0x70 [ 543.803973] ? finish_task_switch+0x1d3/0x870 [ 543.808501] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.814147] ? syscall_return_slowpath+0x31d/0x5e0 [ 543.819197] ? sysret32_from_system_call+0x5/0x46 [ 543.824100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.828988] entry_SYSENTER_compat+0x70/0x7f [ 543.833520] RIP: 0023:0xf7faacb9 [ 543.836998] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 543.856965] RSP: 002b:00000000f5fa60ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 543.864721] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 000000004020ae46 [ 543.872013] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.879335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.886635] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 543.893924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 19:24:55 executing program 4: mlockall(0x2) io_setup(0x800, &(0x7f0000000140)) 19:24:55 executing program 6: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x5}}}}}, 0x0) 19:24:55 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$adsp(&(0x7f00000005c0)='/dev/adsp#\x00', 0x3f, 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x8) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x404ffff8000]}) 19:24:55 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$set_reqkey_keyring(0xe, 0x2) 19:24:55 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x125f, 0x0) 19:24:55 executing program 6: syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x5}}}}}, 0x0) 19:24:55 executing program 4: mlockall(0x2) io_setup(0x800, &(0x7f0000000140)) [ 544.124590] syz-executor7: vmalloc: allocation failure: 8631877568 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 544.136402] syz-executor7 cpuset=syz7 mems_allowed=0 [ 544.141712] CPU: 1 PID: 4959 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #48 [ 544.149028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.158405] Call Trace: [ 544.161028] dump_stack+0x1c9/0x2b4 [ 544.164775] ? dump_stack_print_info.cold.2+0x52/0x52 [ 544.169997] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 544.174882] warn_alloc.cold.117+0xb7/0x1bd [ 544.179243] ? zone_watermark_ok_safe+0x3d0/0x3d0 [ 544.184122] ? __schedule+0x884/0x1ed0 [ 544.188044] ? print_usage_bug+0xc0/0xc0 [ 544.192149] __vmalloc_node_range+0x472/0x760 [ 544.196679] ? lock_acquire+0x1e4/0x540 [ 544.200685] ? graph_lock+0x170/0x170 [ 544.204520] ? kvm_arch_create_memslot+0xc0/0x570 [ 544.209422] __vmalloc_node_flags_caller+0x75/0x90 [ 544.214379] ? kvm_arch_create_memslot+0xc0/0x570 [ 544.219261] kvmalloc_node+0xd7/0xf0 19:24:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}, 0x1}, 0x0) [ 544.223015] kvm_arch_create_memslot+0xc0/0x570 [ 544.227720] __kvm_set_memory_region+0x1d35/0x2e60 [ 544.232870] ? kvm_vcpu_block+0x1070/0x1070 [ 544.237240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.242803] ? futex_wait_queue_me+0x553/0x830 [ 544.247427] ? kasan_check_write+0x14/0x20 [ 544.251685] ? do_raw_spin_lock+0xc1/0x200 [ 544.255973] ? graph_lock+0x170/0x170 [ 544.259796] ? get_futex_value_locked+0xcb/0xf0 [ 544.264494] ? print_usage_bug+0xc0/0xc0 [ 544.268615] ? futex_wait_setup+0x281/0x410 [ 544.273150] ? find_held_lock+0x36/0x1c0 [ 544.277439] ? lock_downgrade+0x8f0/0x8f0 [ 544.281645] kvm_set_memory_region+0x2e/0x50 [ 544.286082] kvm_vm_ioctl+0x664/0x1d80 [ 544.290003] ? kvm_set_memory_region+0x50/0x50 [ 544.294624] ? perf_trace_lock+0x920/0x920 [ 544.298883] ? do_futex+0x249/0x27d0 [ 544.302620] ? rcu_is_watching+0x8c/0x150 [ 544.307140] ? graph_lock+0x170/0x170 [ 544.310966] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 544.315559] ? exit_robust_list+0x290/0x290 [ 544.319933] ? lock_downgrade+0x8f0/0x8f0 19:24:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) 19:24:55 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x125f, 0x0) [ 544.324109] ? kasan_check_read+0x11/0x20 [ 544.328285] ? rcu_is_watching+0x8c/0x150 [ 544.332463] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 544.336900] ? __fget+0x414/0x670 [ 544.340469] ? expand_files.part.8+0x9c0/0x9c0 [ 544.345086] ? trace_hardirqs_off+0xd/0x10 [ 544.349344] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 544.354468] ? debug_check_no_obj_freed+0x30b/0x595 [ 544.359512] ? rcu_is_watching+0x8c/0x150 [ 544.363687] ? __fget_light+0x2f7/0x440 [ 544.367690] kvm_vm_compat_ioctl+0x143/0x430 [ 544.372126] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 544.376308] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 544.381270] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 544.387099] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 544.391420] __ia32_compat_sys_ioctl+0x221/0x640 [ 544.396218] do_fast_syscall_32+0x34d/0xfb2 [ 544.400565] ? do_int80_syscall_32+0x890/0x890 [ 544.405525] ? kasan_check_write+0x14/0x20 [ 544.409819] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.415381] ? syscall_return_slowpath+0x31d/0x5e0 [ 544.420425] ? sysret32_from_system_call+0x5/0x46 19:24:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) [ 544.425318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 544.430196] entry_SYSENTER_compat+0x70/0x7f [ 544.434616] RIP: 0023:0xf7faacb9 [ 544.437985] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 544.457472] RSP: 002b:00000000f5fa60ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 544.465208] RAX: ffffffffffffffda RBX: 0000000000000015 RCX: 000000004020ae46 [ 544.472494] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 544.479781] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 544.487069] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 544.494356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 544.502230] warn_alloc_show_mem: 1 callbacks suppressed [ 544.502238] Mem-Info: [ 544.510311] active_anon:30744 inactive_anon:337 isolated_anon:0 [ 544.510311] active_file:4640 inactive_file:13848 isolated_file:0 [ 544.510311] unevictable:0 dirty:115 writeback:0 unstable:0 [ 544.510311] slab_reclaimable:10354 slab_unreclaimable:101266 [ 544.510311] mapped:74285 shmem:348 pagetables:942 bounce:0 [ 544.510311] free:1371081 free_pcp:400 free_cma:0 [ 544.544225] Node 0 active_anon:122988kB inactive_anon:1348kB active_file:18560kB inactive_file:55392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:297040kB dirty:460kB writeback:0kB shmem:1392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 102400kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 544.572647] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.598860] lowmem_reserve[]: 0 2827 6331 6331 [ 544.603530] Node 0 DMA32 free:2897968kB min:30100kB low:37624kB high:45148kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2898900kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:932kB local_pcp:712kB free_cma:0kB [ 544.632000] lowmem_reserve[]: 0 0 3504 3504 [ 544.636441] Node 0 Normal free:2560628kB min:37316kB low:46644kB high:55972kB active_anon:131312kB inactive_anon:1348kB active_file:18560kB inactive_file:55492kB unevictable:0kB writepending:460kB present:4718592kB managed:3589008kB mlocked:0kB kernel_stack:5792kB pagetables:4064kB bounce:0kB free_pcp:612kB local_pcp:244kB free_cma:0kB [ 544.667192] lowmem_reserve[]: 0 0 0 0 [ 544.671063] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 544.685507] Node 0 DMA32: 2*4kB (UM) 3*8kB (UM) 3*16kB (UM) 3*32kB (M) 2*64kB (UM) 4*128kB (UM) 1*256kB (M) 4*512kB (UM) 5*1024kB (UM) 3*2048kB (UM) 704*4096kB (M) = 2897968kB [ 544.701619] Node 0 Normal: 633*4kB (UME) 786*8kB (UME) 980*16kB (UME) 630*32kB (UME) 292*64kB (UME) 138*128kB (UME) 49*256kB (UME) 104*512kB (UME) 40*1024kB (UME) 2*2048kB (UM) 579*4096kB (UM) = 2563444kB 19:24:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) 19:24:55 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x0, 0x7}, 0xc) 19:24:55 executing program 4: mlockall(0x2) io_setup(0x800, &(0x7f0000000140)) 19:24:55 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x125f, 0x0) 19:24:56 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x125f, 0x0) 19:24:56 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 544.720141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 544.728767] 18871 total pagecache pages [ 544.732805] 0 pages in swap cache [ 544.736364] Swap cache stats: add 0, delete 0, find 0/0 [ 544.741791] Free swap = 0kB [ 544.744855] Total swap = 0kB [ 544.747935] 1965969 pages RAM [ 544.751086] 0 pages HighMem/MovableOnly [ 544.755119] 340015 pages reserved 19:24:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:24:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}, 0x1}, 0x0) 19:24:56 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="10", 0x1}], 0x1, &(0x7f0000002800)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0x200005dc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:24:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}, 0x1}, 0x0) 19:24:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:24:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}, 0x1}, 0x0) 19:24:56 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="10", 0x1}], 0x1, &(0x7f0000002800)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0x200005dc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:24:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) 19:24:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:24:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000001d000)="a9", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000021000), 0x0) dup2(r0, r1) 19:24:56 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:24:56 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="10", 0x1}], 0x1, &(0x7f0000002800)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0x200005dc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:24:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:24:56 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x0, 0x7}, 0xc) 19:24:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) recvfrom$packet(r2, &(0x7f0000000440)=""/23, 0x17, 0x0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="7a30f9515d33"}, 0x14) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 19:24:57 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:24:57 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="10", 0x1}], 0x1, &(0x7f0000002800)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/220, 0x200005dc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:24:57 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:24:57 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 19:24:57 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 19:24:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0) 19:24:57 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:24:57 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 19:24:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0) 19:24:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(arc4-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffff4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$unix(r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) 19:24:57 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0x2f00, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 19:24:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 19:24:57 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0) 19:24:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x2, r0, 0x0) 19:24:57 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x0, 0x7}, 0xc) 19:24:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) recvfrom$packet(r2, &(0x7f0000000440)=""/23, 0x17, 0x0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="7a30f9515d33"}, 0x14) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 19:24:58 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:24:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 19:24:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(arc4-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffff4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$unix(r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) 19:24:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x2, r0, 0x0) 19:24:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fsetxattr(r0, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140), 0x0, 0x0) 19:24:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(arc4-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffff4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$unix(r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) 19:24:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 19:24:58 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="002000000000f1e0"], 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(arc4-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffff4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$unix(r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) 19:24:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(arc4-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffff4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$unix(r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) 19:24:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x2, r0, 0x0) 19:24:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 19:24:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x2, r0, 0x0) 19:24:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(arc4-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffff4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$unix(r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) 19:24:58 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x0, 0x7}, 0xc) 19:24:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) recvfrom$packet(r2, &(0x7f0000000440)=""/23, 0x17, 0x0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="7a30f9515d33"}, 0x14) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 19:24:59 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:24:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(arc4-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0xfffffff4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$unix(r1, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) 19:24:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="002000000000f1e0"], 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:59 executing program 2: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cgroup.max.descendants\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0xcf, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:24:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40106f33, &(0x7f0000000040)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 19:24:59 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000ae1000)='/dev/cuse\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000908000)='./file0\x00', &(0x7f0000e77000)={0x8}, &(0x7f0000fd1000), 0x1400) 19:24:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40106f33, &(0x7f0000000040)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 19:24:59 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000ae1000)='/dev/cuse\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000908000)='./file0\x00', &(0x7f0000e77000)={0x8}, &(0x7f0000fd1000), 0x1400) 19:24:59 executing program 2: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cgroup.max.descendants\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0xcf, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x835, 0x0, 0x0, {0xa}, [@IFA_ADDRESS={0x14, 0x1}, @IFA_LOCAL={0x14, 0x2}]}, 0x40}, 0x1}, 0x0) 19:24:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="002000000000f1e0"], 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:24:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40106f33, &(0x7f0000000040)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 19:24:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x835, 0x0, 0x0, {0xa}, [@IFA_ADDRESS={0x14, 0x1}, @IFA_LOCAL={0x14, 0x2}]}, 0x40}, 0x1}, 0x0) 19:24:59 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000ae1000)='/dev/cuse\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000908000)='./file0\x00', &(0x7f0000e77000)={0x8}, &(0x7f0000fd1000), 0x1400) 19:24:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) recvfrom$packet(r2, &(0x7f0000000440)=""/23, 0x17, 0x0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="7a30f9515d33"}, 0x14) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 19:24:59 executing program 2: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cgroup.max.descendants\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0xcf, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:25:00 executing program 2: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cgroup.max.descendants\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0xcf, r2) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r5, r4}, &(0x7f0000000280)=""/132, 0x84, 0x0) 19:25:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x835, 0x0, 0x0, {0xa}, [@IFA_ADDRESS={0x14, 0x1}, @IFA_LOCAL={0x14, 0x2}]}, 0x40}, 0x1}, 0x0) 19:25:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='m', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x1f361) write(r1, &(0x7f0000000000)="ac", 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x34000) 19:25:00 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40106f33, &(0x7f0000000040)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 19:25:00 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000ae1000)='/dev/cuse\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f0000908000)='./file0\x00', &(0x7f0000e77000)={0x8}, &(0x7f0000fd1000), 0x1400) 19:25:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="002000000000f1e0"], 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4d0}]}) 19:25:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x835, 0x0, 0x0, {0xa}, [@IFA_ADDRESS={0x14, 0x1}, @IFA_LOCAL={0x14, 0x2}]}, 0x40}, 0x1}, 0x0) 19:25:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x14, 0x1d, 0x217}, 0x14}, 0x1}, 0x0) 19:25:00 executing program 2: unshare(0x2000400) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280), 0x0) 19:25:00 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000140)=@generic={0x11, "1ad42b67375f5c10070ac0cb42112823a3e2ec5b0f76138b1e31a5aa5a33c263c3afb939e6751ed67a43bc26ffc5d58ff744441d370400816880f11b3fd0659f95b1ef40968053f76f0a9d3aeb9d6ade3c7a5efb06a5265782105127d6c7f517096c43d99a6aa461bea48c283d2ca6c2dd28f2a08e55ca0cf35eb331f7df"}, 0x80) 19:25:00 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x0) 19:25:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x14, 0x1d, 0x217}, 0x14}, 0x1}, 0x0) 19:25:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4d0}]}) 19:25:00 executing program 2: unshare(0x2000400) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280), 0x0) 19:25:00 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$void(r0, 0x5450) 19:25:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:01 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='m', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x1f361) write(r1, &(0x7f0000000000)="ac", 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x34000) 19:25:01 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000140)=@generic={0x11, "1ad42b67375f5c10070ac0cb42112823a3e2ec5b0f76138b1e31a5aa5a33c263c3afb939e6751ed67a43bc26ffc5d58ff744441d370400816880f11b3fd0659f95b1ef40968053f76f0a9d3aeb9d6ade3c7a5efb06a5265782105127d6c7f517096c43d99a6aa461bea48c283d2ca6c2dd28f2a08e55ca0cf35eb331f7df"}, 0x80) 19:25:01 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x0) 19:25:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4df, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0xc0ffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff87, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) 19:25:01 executing program 2: unshare(0x2000400) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280), 0x0) 19:25:01 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x14, 0x1d, 0x217}, 0x14}, 0x1}, 0x0) 19:25:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4d0}]}) 19:25:01 executing program 2: unshare(0x2000400) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280), 0x0) 19:25:01 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x0) 19:25:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4df, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0xc0ffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff87, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) 19:25:01 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000140)=@generic={0x11, "1ad42b67375f5c10070ac0cb42112823a3e2ec5b0f76138b1e31a5aa5a33c263c3afb939e6751ed67a43bc26ffc5d58ff744441d370400816880f11b3fd0659f95b1ef40968053f76f0a9d3aeb9d6ade3c7a5efb06a5265782105127d6c7f517096c43d99a6aa461bea48c283d2ca6c2dd28f2a08e55ca0cf35eb331f7df"}, 0x80) 19:25:01 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x14, 0x1d, 0x217}, 0x14}, 0x1}, 0x0) 19:25:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4d0}]}) 19:25:01 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) shutdown(r0, 0x0) 19:25:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4df, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0xc0ffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff87, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) 19:25:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:02 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000140)=@generic={0x11, "1ad42b67375f5c10070ac0cb42112823a3e2ec5b0f76138b1e31a5aa5a33c263c3afb939e6751ed67a43bc26ffc5d58ff744441d370400816880f11b3fd0659f95b1ef40968053f76f0a9d3aeb9d6ade3c7a5efb06a5265782105127d6c7f517096c43d99a6aa461bea48c283d2ca6c2dd28f2a08e55ca0cf35eb331f7df"}, 0x80) 19:25:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='m', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x1f361) write(r1, &(0x7f0000000000)="ac", 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x34000) 19:25:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0006000000010000000200000800005d14dfb51571a4", 0x39}], 0x1) 19:25:02 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4df, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0xc0ffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff87, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) 19:25:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x4004556b, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 19:25:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x4004556b, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 19:25:02 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) 19:25:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0006000000010000000200000800005d14dfb51571a4", 0x39}], 0x1) 19:25:02 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)="000000001140177bbbc4e7cba436ebeb8222") exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000040)=""/114, 0x72) 19:25:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x4004556b, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 19:25:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0006000000010000000200000800005d14dfb51571a4", 0x39}], 0x1) 19:25:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='m', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x1f361) write(r1, &(0x7f0000000000)="ac", 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) write$binfmt_misc(r2, &(0x7f0000000080)={'syz0'}, 0x34000) 19:25:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x4004556b, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil}) 19:25:03 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:03 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) 19:25:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000300)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0006000000010000000200000800005d14dfb51571a4", 0x39}], 0x1) 19:25:03 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 19:25:03 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0xbff, [0xc2, 0x0, 0x40000001]}) 19:25:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:03 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:03 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 19:25:03 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) 19:25:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/135, 0x87}], 0x1) sendfile64(r0, r0, &(0x7f0000000000), 0x2) [ 551.874964] kvm [5400]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 19:25:03 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x504, [0x20000700, 0x0, 0x0, 0x20000984, 0x20000bd4], 0x0, &(0x7f0000000000), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'team0\x00', 'gretap0\x00', 'veth0_to_bridge\x00', 'irlan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xd0, 0x224, 0x254, [@cluster={'cluster\x00', 0x10}, @vlan={'vlan\x00', 0x8}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:dhcpc_exec_t:s0\x00'}}}, @common=@redirect={'redirect\x00', 0x4}]}, @snat={'snat\x00', 0xc, {{@random="b64c3e8a9f7c"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_bridge\x00', 'syz_tun\x00', 'teql0\x00', 'veth0_to_bond\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x1c0, 0x1f0, 0x220, [@m802_3={'802_3\x00', 0x8}, @comment={'comment\x00', 0x100}]}, [@arpreply={'arpreply\x00', 0xc, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x554) 19:25:03 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)="000000001140177bbbc4e7cba436ebeb8222") exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000040)=""/114, 0x72) 19:25:03 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 19:25:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/135, 0x87}], 0x1) sendfile64(r0, r0, &(0x7f0000000000), 0x2) 19:25:03 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) 19:25:03 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x504, [0x20000700, 0x0, 0x0, 0x20000984, 0x20000bd4], 0x0, &(0x7f0000000000), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'team0\x00', 'gretap0\x00', 'veth0_to_bridge\x00', 'irlan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xd0, 0x224, 0x254, [@cluster={'cluster\x00', 0x10}, @vlan={'vlan\x00', 0x8}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:dhcpc_exec_t:s0\x00'}}}, @common=@redirect={'redirect\x00', 0x4}]}, @snat={'snat\x00', 0xc, {{@random="b64c3e8a9f7c"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_bridge\x00', 'syz_tun\x00', 'teql0\x00', 'veth0_to_bond\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x1c0, 0x1f0, 0x220, [@m802_3={'802_3\x00', 0x8}, @comment={'comment\x00', 0x100}]}, [@arpreply={'arpreply\x00', 0xc, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x554) 19:25:04 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/135, 0x87}], 0x1) sendfile64(r0, r0, &(0x7f0000000000), 0x2) 19:25:04 executing program 5: syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv6={0x86dd, {0x0, 0x6, "6f87a9", 0x18, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) 19:25:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/135, 0x87}], 0x1) sendfile64(r0, r0, &(0x7f0000000000), 0x2) 19:25:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x504, [0x20000700, 0x0, 0x0, 0x20000984, 0x20000bd4], 0x0, &(0x7f0000000000), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'team0\x00', 'gretap0\x00', 'veth0_to_bridge\x00', 'irlan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xd0, 0x224, 0x254, [@cluster={'cluster\x00', 0x10}, @vlan={'vlan\x00', 0x8}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:dhcpc_exec_t:s0\x00'}}}, @common=@redirect={'redirect\x00', 0x4}]}, @snat={'snat\x00', 0xc, {{@random="b64c3e8a9f7c"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_bridge\x00', 'syz_tun\x00', 'teql0\x00', 'veth0_to_bond\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x1c0, 0x1f0, 0x220, [@m802_3={'802_3\x00', 0x8}, @comment={'comment\x00', 0x100}]}, [@arpreply={'arpreply\x00', 0xc, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x554) 19:25:04 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) 19:25:04 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/135, 0x87}], 0x1) sendfile64(r0, r0, &(0x7f0000000000), 0x2) 19:25:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101040, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, r0, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x8c2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 19:25:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/135, 0x87}], 0x1) sendfile64(r0, r0, &(0x7f0000000000), 0x2) 19:25:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x504, [0x20000700, 0x0, 0x0, 0x20000984, 0x20000bd4], 0x0, &(0x7f0000000000), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'team0\x00', 'gretap0\x00', 'veth0_to_bridge\x00', 'irlan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xd0, 0x224, 0x254, [@cluster={'cluster\x00', 0x10}, @vlan={'vlan\x00', 0x8}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:dhcpc_exec_t:s0\x00'}}}, @common=@redirect={'redirect\x00', 0x4}]}, @snat={'snat\x00', 0xc, {{@random="b64c3e8a9f7c"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_bridge\x00', 'syz_tun\x00', 'teql0\x00', 'veth0_to_bond\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x1c0, 0x1f0, 0x220, [@m802_3={'802_3\x00', 0x8}, @comment={'comment\x00', 0x100}]}, [@arpreply={'arpreply\x00', 0xc, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x554) 19:25:04 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)="000000001140177bbbc4e7cba436ebeb8222") exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000040)=""/114, 0x72) 19:25:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:04 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101040, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, r0, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x8c2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 19:25:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') readv(r0, &(0x7f0000001680)=[{&(0x7f0000001500)=""/135, 0x87}], 0x1) sendfile64(r0, r0, &(0x7f0000000000), 0x2) 19:25:04 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x75, &(0x7f0000000240), 0x8) 19:25:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:05 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x34d1f084b864a529) 19:25:05 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101040, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, r0, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x8c2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 19:25:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:05 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x34d1f084b864a529) 19:25:05 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101040, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, r0, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x8c2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedsend(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 19:25:05 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:05 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)="000000001140177bbbc4e7cba436ebeb8222") exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000000040)=""/114, 0x72) 19:25:05 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x34d1f084b864a529) 19:25:05 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:05 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x75, &(0x7f0000000240), 0x8) 19:25:05 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x34d1f084b864a529) 19:25:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:05 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfe7a) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0xc4) 19:25:05 executing program 7: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 19:25:06 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x11, 0x201}, 0x14}, 0x1}, 0x0) 19:25:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 19:25:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x11, 0x201}, 0x14}, 0x1}, 0x0) 19:25:06 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:06 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)="6e65742f757a706c69746500e0dd9c3ccfa636a3370dd076196adb6368dd607f59e72a3905a1c917eb2dafdf084c0fc609f56d3cbe7ef714b513a7741fbbd3593c7ea73de8f50d4bd748eca1e87147d0c307b58c4f3348b3039720a493955bbcf498971fefd689ac28796956fc4dc7aabef148ce60f0869cc0a6f69b6d44600ab45100") 19:25:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 19:25:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x11, 0x201}, 0x14}, 0x1}, 0x0) 19:25:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x11, 0x201}, 0x14}, 0x1}, 0x0) 19:25:06 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x75, &(0x7f0000000240), 0x8) 19:25:06 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)="6e65742f757a706c69746500e0dd9c3ccfa636a3370dd076196adb6368dd607f59e72a3905a1c917eb2dafdf084c0fc609f56d3cbe7ef714b513a7741fbbd3593c7ea73de8f50d4bd748eca1e87147d0c307b58c4f3348b3039720a493955bbcf498971fefd689ac28796956fc4dc7aabef148ce60f0869cc0a6f69b6d44600ab45100") 19:25:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 19:25:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 19:25:06 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:06 executing program 7: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:06 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)="6e65742f757a706c69746500e0dd9c3ccfa636a3370dd076196adb6368dd607f59e72a3905a1c917eb2dafdf084c0fc609f56d3cbe7ef714b513a7741fbbd3593c7ea73de8f50d4bd748eca1e87147d0c307b58c4f3348b3039720a493955bbcf498971fefd689ac28796956fc4dc7aabef148ce60f0869cc0a6f69b6d44600ab45100") 19:25:07 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) epoll_create1(0x0) 19:25:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 19:25:07 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)="6e65742f757a706c69746500e0dd9c3ccfa636a3370dd076196adb6368dd607f59e72a3905a1c917eb2dafdf084c0fc609f56d3cbe7ef714b513a7741fbbd3593c7ea73de8f50d4bd748eca1e87147d0c307b58c4f3348b3039720a493955bbcf498971fefd689ac28796956fc4dc7aabef148ce60f0869cc0a6f69b6d44600ab45100") 19:25:07 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 19:25:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 19:25:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 19:25:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 19:25:07 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x75, &(0x7f0000000240), 0x8) 19:25:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) 19:25:07 executing program 2: r0 = memfd_create(&(0x7f0000000180)='em0\'wlan0\x00', 0x4) fchown(r0, 0x0, 0x0) 19:25:07 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:07 executing program 7: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x1d) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:07 executing program 2: r0 = memfd_create(&(0x7f0000000180)='em0\'wlan0\x00', 0x4) fchown(r0, 0x0, 0x0) 19:25:07 executing program 3: r0 = memfd_create(&(0x7f0000000180)='em0\'wlan0\x00', 0x4) fchown(r0, 0x0, 0x0) 19:25:08 executing program 3: r0 = memfd_create(&(0x7f0000000180)='em0\'wlan0\x00', 0x4) fchown(r0, 0x0, 0x0) 19:25:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) epoll_create1(0x0) 19:25:08 executing program 2: r0 = memfd_create(&(0x7f0000000180)='em0\'wlan0\x00', 0x4) fchown(r0, 0x0, 0x0) 19:25:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000004c0)="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", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000040), 0x20000102000007) 19:25:08 executing program 3: r0 = memfd_create(&(0x7f0000000180)='em0\'wlan0\x00', 0x4) fchown(r0, 0x0, 0x0) 19:25:08 executing program 2: r0 = memfd_create(&(0x7f0000000180)='em0\'wlan0\x00', 0x4) fchown(r0, 0x0, 0x0) 19:25:08 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) dup3(r0, r1, 0x0) 19:25:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000) syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_cache\x00') 19:25:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendmmsg(r0, &(0x7f0000001180)=[{{&(0x7f00000001c0)=@sco={0x1f}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000003040)}}], 0x1, 0x0) sendmmsg(r0, &(0x7f000000ef80)=[{{0x0, 0x0, &(0x7f000000ca80)=[{&(0x7f000000c980)="a7", 0x1}], 0x1, &(0x7f000000cb00)}}], 0x1, 0x41) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) close(r0) 19:25:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:08 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0xc004510e, &(0x7f0000000b40)=""/122) 19:25:08 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) dup3(r0, r1, 0x0) 19:25:08 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendmmsg(r0, &(0x7f0000001180)=[{{&(0x7f00000001c0)=@sco={0x1f}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000003040)}}], 0x1, 0x0) sendmmsg(r0, &(0x7f000000ef80)=[{{0x0, 0x0, &(0x7f000000ca80)=[{&(0x7f000000c980)="a7", 0x1}], 0x1, &(0x7f000000cb00)}}], 0x1, 0x41) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) close(r0) 19:25:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000) syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_cache\x00') 19:25:08 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) dup3(r0, r1, 0x0) 19:25:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000) syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_cache\x00') 19:25:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) epoll_create1(0x0) 19:25:09 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0xc004510e, &(0x7f0000000b40)=""/122) 19:25:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendmmsg(r0, &(0x7f0000001180)=[{{&(0x7f00000001c0)=@sco={0x1f}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000003040)}}], 0x1, 0x0) sendmmsg(r0, &(0x7f000000ef80)=[{{0x0, 0x0, &(0x7f000000ca80)=[{&(0x7f000000c980)="a7", 0x1}], 0x1, &(0x7f000000cb00)}}], 0x1, 0x41) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) close(r0) 19:25:09 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) dup3(r0, r1, 0x0) 19:25:09 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) dup3(r0, r1, 0x0) 19:25:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f000000a000)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000) syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_cache\x00') 19:25:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0xc004510e, &(0x7f0000000b40)=""/122) 19:25:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:09 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:09 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) dup3(r0, r1, 0x0) 19:25:09 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) dup3(r0, r1, 0x0) 19:25:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendmmsg(r0, &(0x7f0000001180)=[{{&(0x7f00000001c0)=@sco={0x1f}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000003040)}}], 0x1, 0x0) sendmmsg(r0, &(0x7f000000ef80)=[{{0x0, 0x0, &(0x7f000000ca80)=[{&(0x7f000000c980)="a7", 0x1}], 0x1, &(0x7f000000cb00)}}], 0x1, 0x41) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) close(r0) 19:25:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0xc004510e, &(0x7f0000000b40)=""/122) 19:25:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) sendto$inet6(r0, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) epoll_create1(0x0) 19:25:10 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:10 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4004af07, 0x0) 19:25:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:10 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4004af07, 0x0) 19:25:10 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x200000088) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f000095c000), 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000072eff0)=[{&(0x7f00000000c0)="480000001400257f09004b01fcfc8c860a881700f217e0060000e30000e5ffffbb5603000000000000000000ffff5bf109000000ed5e000000006203005b00000000000000000000", 0x48}], 0x1) 19:25:10 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 19:25:10 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4004af07, 0x0) 19:25:11 executing program 2: r0 = socket$kcm(0xa, 0x122000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8931, &(0x7f0000000000)={'veth0_to_bond\x00'}) 19:25:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 19:25:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:11 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x200000088) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f000095c000), 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000072eff0)=[{&(0x7f00000000c0)="480000001400257f09004b01fcfc8c860a881700f217e0060000e30000e5ffffbb5603000000000000000000ffff5bf109000000ed5e000000006203005b00000000000000000000", 0x48}], 0x1) 19:25:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x2, 0x0, @ioapic}) 19:25:11 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4004af07, 0x0) 19:25:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) write(r0, &(0x7f00000000c0), 0xfec9) 19:25:11 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x200000088) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f000095c000), 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000072eff0)=[{&(0x7f00000000c0)="480000001400257f09004b01fcfc8c860a881700f217e0060000e30000e5ffffbb5603000000000000000000ffff5bf109000000ed5e000000006203005b00000000000000000000", 0x48}], 0x1) 19:25:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xc868) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0xffcf) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) close(r2) 19:25:11 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14}}]}, 0x24}, 0x1}, 0x0) 19:25:11 executing program 2: r0 = socket$kcm(0xa, 0x122000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8931, &(0x7f0000000000)={'veth0_to_bond\x00'}) 19:25:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 19:25:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x2, 0x0, @ioapic}) 19:25:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) write(r0, &(0x7f00000000c0), 0xfec9) 19:25:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) 19:25:11 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x200000088) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f000095c000), 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000072eff0)=[{&(0x7f00000000c0)="480000001400257f09004b01fcfc8c860a881700f217e0060000e30000e5ffffbb5603000000000000000000ffff5bf109000000ed5e000000006203005b00000000000000000000", 0x48}], 0x1) 19:25:11 executing program 2: r0 = socket$kcm(0xa, 0x122000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8931, &(0x7f0000000000)={'veth0_to_bond\x00'}) 19:25:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) [ 559.998207] x86/PAT: syz-executor3:5928 map pfn RAM range req write-combining for [mem 0x1ab100000-0x1ab103fff], got write-back 19:25:11 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14}}]}, 0x24}, 0x1}, 0x0) 19:25:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) write(r0, &(0x7f00000000c0), 0xfec9) 19:25:11 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x10) 19:25:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x2, 0x0, @ioapic}) [ 560.096567] x86/PAT: syz-executor3:5928 map pfn RAM range req write-combining for [mem 0x1ab100000-0x1ab103fff], got write-back 19:25:11 executing program 2: r0 = socket$kcm(0xa, 0x122000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8931, &(0x7f0000000000)={'veth0_to_bond\x00'}) 19:25:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x2, 0x0, @ioapic}) 19:25:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) write(r0, &(0x7f00000000c0), 0xfec9) 19:25:12 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14}}]}, 0x24}, 0x1}, 0x0) 19:25:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 19:25:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) 19:25:12 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x10) 19:25:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) 19:25:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) 19:25:12 executing program 0: socket$inet(0x28, 0x2, 0xffffffff00000028) 19:25:12 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x10) [ 560.852332] x86/PAT: syz-executor3:5977 map pfn RAM range req write-combining for [mem 0x1ab100000-0x1ab103fff], got write-back [ 560.867577] x86/PAT: syz-executor2:5980 map pfn RAM range req write-combining for [mem 0x19a3d0000-0x19a3d3fff], got write-back [ 560.869533] x86/PAT: syz-executor5:5970 map pfn RAM range req write-combining for [mem 0x1c6ad0000-0x1c6ad3fff], got write-back 19:25:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') read(r0, &(0x7f00000000c0)=""/240, 0x6cef11c48e62c474) 19:25:12 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14}}]}, 0x24}, 0x1}, 0x0) 19:25:12 executing program 0: socket$inet(0x28, 0x2, 0xffffffff00000028) 19:25:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) 19:25:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) 19:25:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) 19:25:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='ppp1eth1+*{mime_type\x00', 0x40, 0x0, &(0x7f0000000080)) 19:25:12 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x10) 19:25:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') read(r0, &(0x7f00000000c0)=""/240, 0x6cef11c48e62c474) 19:25:12 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local={0xfe, 0x80, [], 0xaa}]}, 0x18) [ 561.140904] x86/PAT: syz-executor3:6001 map pfn RAM range req write-combining for [mem 0x1ab100000-0x1ab103fff], got write-back 19:25:12 executing program 0: socket$inet(0x28, 0x2, 0xffffffff00000028) [ 561.190297] x86/PAT: syz-executor5:6010 map pfn RAM range req write-combining for [mem 0x1c6ad0000-0x1c6ad3fff], got write-back [ 561.192249] x86/PAT: syz-executor2:6004 map pfn RAM range req write-combining for [mem 0x19a3d0000-0x19a3d3fff], got write-back 19:25:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='ppp1eth1+*{mime_type\x00', 0x40, 0x0, &(0x7f0000000080)) 19:25:12 executing program 6: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x84, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 19:25:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') read(r0, &(0x7f00000000c0)=""/240, 0x6cef11c48e62c474) 19:25:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) 19:25:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) 19:25:12 executing program 0: socket$inet(0x28, 0x2, 0xffffffff00000028) 19:25:12 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local={0xfe, 0x80, [], 0xaa}]}, 0x18) 19:25:12 executing program 6: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x84, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 19:25:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='ppp1eth1+*{mime_type\x00', 0x40, 0x0, &(0x7f0000000080)) 19:25:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000004, 0x1013, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)) [ 561.452368] x86/PAT: syz-executor3:6036 map pfn RAM range req write-combining for [mem 0x1ab100000-0x1ab103fff], got write-back [ 561.468660] x86/PAT: syz-executor5:6042 map pfn RAM range req write-combining for [mem 0x198360000-0x198363fff], got write-back 19:25:12 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local={0xfe, 0x80, [], 0xaa}]}, 0x18) 19:25:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x6, 0x100000800) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) 19:25:12 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00') read(r0, &(0x7f00000000c0)=""/240, 0x6cef11c48e62c474) 19:25:13 executing program 6: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x84, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 19:25:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='ppp1eth1+*{mime_type\x00', 0x40, 0x0, &(0x7f0000000080)) [ 561.634009] x86/PAT: syz-executor2:6056 map pfn RAM range req write-combining for [mem 0x1940f0000-0x1940f3fff], got write-back 19:25:13 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@local={0xfe, 0x80, [], 0xaa}]}, 0x18) 19:25:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)=r1) 19:25:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) sendmsg$alg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001700)="375cb1bffd033a24", 0x8}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:25:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x6, 0x100000800) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) 19:25:13 executing program 6: syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x84, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0xac1414aa}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 19:25:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xff, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 19:25:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) 19:25:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="24c83f8c35"], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000010c0)={'gretap0\x00', &(0x7f0000001080)=@ethtool_gfeatures={0x3a}}) 19:25:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)=r1) 19:25:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xff, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 19:25:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) sendmsg$alg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001700)="375cb1bffd033a24", 0x8}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:25:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x6, 0x100000800) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) 19:25:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) 19:25:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000010c0)={'gretap0\x00', &(0x7f0000001080)=@ethtool_gfeatures={0x3a}}) 19:25:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)=r1) 19:25:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x6, 0x100000800) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) 19:25:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) sendmsg$alg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001700)="375cb1bffd033a24", 0x8}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:25:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)=r1) 19:25:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="24c83f8c35"], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xff, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 19:25:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) 19:25:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000010c0)={'gretap0\x00', &(0x7f0000001080)=@ethtool_gfeatures={0x3a}}) 19:25:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) sendmsg$alg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001700)="375cb1bffd033a24", 0x8}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1, &(0x7f0000000280)=""/91, 0x5b}, 0x0) 19:25:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)=r1) 19:25:13 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="25af4c79dc434a0d7c5fca710208", 0xe}], 0x1, &(0x7f0000000140)}, 0x0) 19:25:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)=r1) 19:25:13 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) 19:25:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xff, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) 19:25:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000010c0)={'gretap0\x00', &(0x7f0000001080)=@ethtool_gfeatures={0x3a}}) 19:25:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000838fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x1, 0x0, &(0x7f0000000000), &(0x7f00003cfffc), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 19:25:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="24c83f8c35"], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:14 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000003c0)=r1) 19:25:14 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="25af4c79dc434a0d7c5fca710208", 0xe}], 0x1, &(0x7f0000000140)}, 0x0) 19:25:14 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffffffffffffffc0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x0) read(r0, &(0x7f0000000040)=""/81, 0x51) dup3(r0, r1, 0x0) 19:25:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000500)="5ec0b501df7e354ee21a0e461d4074b3fe6860227fcd663b2149358c2a2c9bfb41", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 19:25:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000300)="8e0000000000000004397511e50afbe78831014d0ed11408ed148a16542533a4212181f5074584f28409d87b4d4be87c843e938b0e19f07eab57e0bd1491337ef0fdd7730139973eaf721dd417954027380c98450d576d1f9d020d10dfa2612327000000004a5688a2d5f018d17128ff0fed216202a8a22e64b9b8636d6ad39cd47e7baa581b9363000000000000bfc6c958fa923d34a19b35e6d7caa3054cf8", 0xa0) 19:25:14 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='syscall\x00') sendfile(r1, r1, &(0x7f0000000040)=0x10000, 0x81) [ 562.718921] sd 0:0:1:0: [sg0] tag#5957 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 562.727807] sd 0:0:1:0: [sg0] tag#5957 CDB: Persistent reserve in, read keys [ 562.735220] sd 0:0:1:0: [sg0] tag#5957 CDB[00]: 5e c0 b5 01 df 7e 35 4e e2 1a 0e 46 1d 40 74 b3 [ 562.744159] sd 0:0:1:0: [sg0] tag#5957 CDB[10]: fe 68 60 22 7f cd 66 3b 21 49 35 8c 2a 2c 9b fb [ 562.753133] sd 0:0:1:0: [sg0] tag#5957 CDB[20]: 41 19:25:14 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="25af4c79dc434a0d7c5fca710208", 0xe}], 0x1, &(0x7f0000000140)}, 0x0) 19:25:14 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="24c83f8c35"], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 562.773622] sd 0:0:1:0: [sg0] tag#5972 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 562.782495] sd 0:0:1:0: [sg0] tag#5972 CDB: Persistent reserve in, read keys [ 562.789886] sd 0:0:1:0: [sg0] tag#5972 CDB[00]: 5e c0 b5 01 df 7e 35 4e e2 1a 0e 46 1d 40 74 b3 [ 562.798913] sd 0:0:1:0: [sg0] tag#5972 CDB[10]: fe 68 60 22 7f cd 66 3b 21 49 35 8c 2a 2c 9b fb [ 562.807935] sd 0:0:1:0: [sg0] tag#5972 CDB[20]: 41 19:25:14 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='syscall\x00') sendfile(r1, r1, &(0x7f0000000040)=0x10000, 0x81) 19:25:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000300)="8e0000000000000004397511e50afbe78831014d0ed11408ed148a16542533a4212181f5074584f28409d87b4d4be87c843e938b0e19f07eab57e0bd1491337ef0fdd7730139973eaf721dd417954027380c98450d576d1f9d020d10dfa2612327000000004a5688a2d5f018d17128ff0fed216202a8a22e64b9b8636d6ad39cd47e7baa581b9363000000000000bfc6c958fa923d34a19b35e6d7caa3054cf8", 0xa0) 19:25:14 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 19:25:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000500)="5ec0b501df7e354ee21a0e461d4074b3fe6860227fcd663b2149358c2a2c9bfb41", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 19:25:14 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="25af4c79dc434a0d7c5fca710208", 0xe}], 0x1, &(0x7f0000000140)}, 0x0) 19:25:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000300)="8e0000000000000004397511e50afbe78831014d0ed11408ed148a16542533a4212181f5074584f28409d87b4d4be87c843e938b0e19f07eab57e0bd1491337ef0fdd7730139973eaf721dd417954027380c98450d576d1f9d020d10dfa2612327000000004a5688a2d5f018d17128ff0fed216202a8a22e64b9b8636d6ad39cd47e7baa581b9363000000000000bfc6c958fa923d34a19b35e6d7caa3054cf8", 0xa0) [ 563.088355] sd 0:0:1:0: [sg0] tag#5957 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 563.097246] sd 0:0:1:0: [sg0] tag#5957 CDB: Persistent reserve in, read keys [ 563.104731] sd 0:0:1:0: [sg0] tag#5957 CDB[00]: 5e c0 b5 01 df 7e 35 4e e2 1a 0e 46 1d 40 74 b3 [ 563.113945] sd 0:0:1:0: [sg0] tag#5957 CDB[10]: fe 68 60 22 7f cd 66 3b 21 49 35 8c 2a 2c 9b fb [ 563.122947] sd 0:0:1:0: [sg0] tag#5957 CDB[20]: 41 19:25:14 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='syscall\x00') sendfile(r1, r1, &(0x7f0000000040)=0x10000, 0x81) 19:25:14 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 19:25:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000300)="8e0000000000000004397511e50afbe78831014d0ed11408ed148a16542533a4212181f5074584f28409d87b4d4be87c843e938b0e19f07eab57e0bd1491337ef0fdd7730139973eaf721dd417954027380c98450d576d1f9d020d10dfa2612327000000004a5688a2d5f018d17128ff0fed216202a8a22e64b9b8636d6ad39cd47e7baa581b9363000000000000bfc6c958fa923d34a19b35e6d7caa3054cf8", 0xa0) 19:25:14 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000011440)={0x0, @rand_addr, @multicast1}, &(0x7f0000000040)=0x2) 19:25:15 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffffffffffffffc0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x0) read(r0, &(0x7f0000000040)=""/81, 0x51) dup3(r0, r1, 0x0) 19:25:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:25:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000838fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x1, 0x0, &(0x7f0000000000), &(0x7f00003cfffc), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 19:25:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000500)="5ec0b501df7e354ee21a0e461d4074b3fe6860227fcd663b2149358c2a2c9bfb41", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 19:25:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000011440)={0x0, @rand_addr, @multicast1}, &(0x7f0000000040)=0x2) 19:25:15 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='syscall\x00') sendfile(r1, r1, &(0x7f0000000040)=0x10000, 0x81) 19:25:15 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 19:25:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000838fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x1, 0x0, &(0x7f0000000000), &(0x7f00003cfffc), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 19:25:15 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xde}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 19:25:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000011440)={0x0, @rand_addr, @multicast1}, &(0x7f0000000040)=0x2) [ 563.768662] sd 0:0:1:0: [sg0] tag#5972 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 563.777842] sd 0:0:1:0: [sg0] tag#5972 CDB: Persistent reserve in, read keys [ 563.785236] sd 0:0:1:0: [sg0] tag#5972 CDB[00]: 5e c0 b5 01 df 7e 35 4e e2 1a 0e 46 1d 40 74 b3 [ 563.794187] sd 0:0:1:0: [sg0] tag#5972 CDB[10]: fe 68 60 22 7f cd 66 3b 21 49 35 8c 2a 2c 9b fb [ 563.803126] sd 0:0:1:0: [sg0] tag#5972 CDB[20]: 41 19:25:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:25:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) 19:25:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000500)="5ec0b501df7e354ee21a0e461d4074b3fe6860227fcd663b2149358c2a2c9bfb41", &(0x7f0000000600)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000001600)}) 19:25:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 19:25:15 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000011440)={0x0, @rand_addr, @multicast1}, &(0x7f0000000040)=0x2) [ 564.000576] sd 0:0:1:0: [sg0] tag#5957 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 564.009861] sd 0:0:1:0: [sg0] tag#5957 CDB: Persistent reserve in, read keys [ 564.017238] sd 0:0:1:0: [sg0] tag#5957 CDB[00]: 5e c0 b5 01 df 7e 35 4e e2 1a 0e 46 1d 40 74 b3 [ 564.026454] sd 0:0:1:0: [sg0] tag#5957 CDB[10]: fe 68 60 22 7f cd 66 3b 21 49 35 8c 2a 2c 9b fb [ 564.035841] sd 0:0:1:0: [sg0] tag#5957 CDB[20]: 41 [ 564.049074] *** Guest State *** [ 564.052585] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 564.062125] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 564.071673] CR3 = 0x0000000000000000 [ 564.075494] RSP = 0x0000000000000003 RIP = 0x0000000000000000 [ 564.081814] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 564.088359] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 564.095123] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.103285] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.111368] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.119425] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.127549] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.135594] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.143754] GDTR: limit=0x00000000, base=0x0000000000000000 [ 564.151826] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.159937] IDTR: limit=0x00000000, base=0x0000000000000000 [ 564.168160] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 564.176204] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 564.182691] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 564.190196] Interruptibility = 00000008 ActivityState = 00000000 [ 564.196484] *** Host State *** [ 564.199734] RIP = 0xffffffff811f4664 RSP = 0xffff8801d8d573d0 [ 564.205781] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 564.212246] FSBase=0000000000000000 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 564.220122] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 564.226061] CR0=0000000080050033 CR3=00000001c4a05000 CR4=00000000001426f0 [ 564.233146] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87a01380 [ 564.239867] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 564.245992] *** Control State *** 19:25:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) [ 564.249497] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 564.256229] EntryControls=0000d1ff ExitControls=0023efff [ 564.261738] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 564.268900] VMEntry: intr_info=00000202 errcode=00000000 ilen=00000000 [ 564.275702] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 564.282425] reason=80000021 qualification=0000000000000000 [ 564.288796] IDTVectoring: info=00000000 errcode=00000000 [ 564.294307] TSC Offset = 0xfffffece83c18419 [ 564.298676] EPT pointer = 0x00000001af85e01e 19:25:16 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffffffffffffffc0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x0) read(r0, &(0x7f0000000040)=""/81, 0x51) dup3(r0, r1, 0x0) 19:25:16 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x2, 0x360, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'eql\x00', 'veth0_to_team\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0xd4, 0xd4, 0xfc, [@devgroup={'devgroup\x00', 0x14, {{0x4}}}, @cgroup0={'cgroup\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}, {{{0x11, 0x0, 0x0, 'syzkaller0\x00', 'gretap0\x00', 'veth1_to_bond\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @random="b33321d70466", [], 0xa8, 0xa8, 0x1d4, [@devgroup={'devgroup\x00', 0x14}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usbtty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x3b0) 19:25:16 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0xb719334de324b59, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @empty, 0xffffffff}, r1}}, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x251) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) 19:25:16 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00006dbffc)=0xfffffffffffffffc, 0x4) 19:25:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000010007fbdb72d1cb2a4a280930a06000000a84308910000000e00080008000c00000000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 19:25:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) 19:25:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000838fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x1, 0x0, &(0x7f0000000000), &(0x7f00003cfffc), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 19:25:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000838fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x1, 0x0, &(0x7f0000000000), &(0x7f00003cfffc), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 564.800758] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 19:25:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000010007fbdb72d1cb2a4a280930a06000000a84308910000000e00080008000c00000000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 19:25:16 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x2, 0x360, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'eql\x00', 'veth0_to_team\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0xd4, 0xd4, 0xfc, [@devgroup={'devgroup\x00', 0x14, {{0x4}}}, @cgroup0={'cgroup\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}, {{{0x11, 0x0, 0x0, 'syzkaller0\x00', 'gretap0\x00', 'veth1_to_bond\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @random="b33321d70466", [], 0xa8, 0xa8, 0x1d4, [@devgroup={'devgroup\x00', 0x14}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usbtty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x3b0) 19:25:16 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00006dbffc)=0xfffffffffffffffc, 0x4) 19:25:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) 19:25:16 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0xb719334de324b59, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @empty, 0xffffffff}, r1}}, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x251) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) [ 564.916219] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 19:25:16 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00006dbffc)=0xfffffffffffffffc, 0x4) 19:25:16 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x2, 0x360, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'eql\x00', 'veth0_to_team\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0xd4, 0xd4, 0xfc, [@devgroup={'devgroup\x00', 0x14, {{0x4}}}, @cgroup0={'cgroup\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}, {{{0x11, 0x0, 0x0, 'syzkaller0\x00', 'gretap0\x00', 'veth1_to_bond\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @random="b33321d70466", [], 0xa8, 0xa8, 0x1d4, [@devgroup={'devgroup\x00', 0x14}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usbtty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x3b0) 19:25:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000010007fbdb72d1cb2a4a280930a06000000a84308910000000e00080008000c00000000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) [ 565.136370] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 19:25:17 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffffffffffffffc0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x0) read(r0, &(0x7f0000000040)=""/81, 0x51) dup3(r0, r1, 0x0) 19:25:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) 19:25:17 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00006dbffc)=0xfffffffffffffffc, 0x4) 19:25:17 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x2, 0x360, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'eql\x00', 'veth0_to_team\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0xd4, 0xd4, 0xfc, [@devgroup={'devgroup\x00', 0x14, {{0x4}}}, @cgroup0={'cgroup\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}, {{{0x11, 0x0, 0x0, 'syzkaller0\x00', 'gretap0\x00', 'veth1_to_bond\x00', 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @random="b33321d70466", [], 0xa8, 0xa8, 0x1d4, [@devgroup={'devgroup\x00', 0x14}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usbtty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x3b0) 19:25:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000010007fbdb72d1cb2a4a280930a06000000a84308910000000e00080008000c00000000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) 19:25:17 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0xb719334de324b59, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @empty, 0xffffffff}, r1}}, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x251) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) 19:25:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000838fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x1, 0x0, &(0x7f0000000000), &(0x7f00003cfffc), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 19:25:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000838fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) futex(&(0x7f0000012ffc), 0x1, 0x0, &(0x7f0000000000), &(0x7f00003cfffc), 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 565.752941] netlink: 17 bytes leftover after parsing attributes in process `syz-executor4'. 19:25:17 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0xb719334de324b59, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @empty, 0xffffffff}, r1}}, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x251) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) 19:25:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) 19:25:17 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0x24}, 0x1}, 0x0) 19:25:17 executing program 4: r0 = socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="8b", 0x1}]) 19:25:17 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0xb719334de324b59, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @empty, 0xffffffff}, r1}}, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x251) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) [ 565.928716] netlink: 'syz-executor6': attribute type 21 has an invalid length. [ 565.962742] netlink: 'syz-executor6': attribute type 21 has an invalid length. 19:25:17 executing program 4: r0 = socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="8b", 0x1}]) 19:25:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) 19:25:17 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0x24}, 0x1}, 0x0) [ 566.151508] netlink: 'syz-executor6': attribute type 21 has an invalid length. 19:25:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc001001f}]}) 19:25:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000080}]}) 19:25:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0x24}, 0x1}, 0x0) 19:25:18 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0xb719334de324b59, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @empty, 0xffffffff}, r1}}, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x251) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) 19:25:18 executing program 4: r0 = socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="8b", 0x1}]) 19:25:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) 19:25:18 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000010000000000000000000000", 0x10}]) 19:25:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') lseek(r0, 0x7fffffffffd, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1) 19:25:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') lseek(r0, 0x7fffffffffd, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1) 19:25:18 executing program 4: r0 = socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="8b", 0x1}]) [ 566.806532] netlink: 'syz-executor6': attribute type 21 has an invalid length. 19:25:18 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000010000000000000000000000", 0x10}]) 19:25:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc001001f}]}) 19:25:18 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}]}, 0x24}, 0x1}, 0x0) 19:25:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000080}]}) 19:25:18 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c0000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 19:25:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') lseek(r0, 0x7fffffffffd, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1) 19:25:18 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000240)=""/219, 0xdb) 19:25:18 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000010000000000000000000000", 0x10}]) 19:25:18 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0xb719334de324b59, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @empty, 0xffffffff}, r1}}, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x251) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r2, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) [ 567.117135] netlink: 'syz-executor6': attribute type 21 has an invalid length. 19:25:18 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c0000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 19:25:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc001001f}]}) 19:25:18 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000000)="10000000010000000000000000000000", 0x10}]) 19:25:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') lseek(r0, 0x7fffffffffd, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1) 19:25:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000080}]}) 19:25:18 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:25:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x2400) close(r0) 19:25:18 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c0000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 19:25:18 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:25:18 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000140)=0x8) 19:25:18 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x0) 19:25:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000080}]}) 19:25:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x2400) close(r0) 19:25:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc001001f}]}) 19:25:18 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c0000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 19:25:19 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:25:19 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x0) 19:25:19 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x2) ppoll(&(0x7f0000bc0fd0)=[{r1}], 0x1, &(0x7f0000c03ff0), &(0x7f0000a1bff8), 0x8) 19:25:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x2400) close(r0) 19:25:19 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x2) ppoll(&(0x7f0000bc0fd0)=[{r1}], 0x1, &(0x7f0000c03ff0), &(0x7f0000a1bff8), 0x8) 19:25:19 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x0) 19:25:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 19:25:19 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 19:25:19 executing program 5: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0xf401, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:25:19 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:19 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000140)=0x8) 19:25:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x2400) close(r0) 19:25:19 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x2) ppoll(&(0x7f0000bc0fd0)=[{r1}], 0x1, &(0x7f0000c03ff0), &(0x7f0000a1bff8), 0x8) 19:25:19 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x0) 19:25:19 executing program 5: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0xf401, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:25:19 executing program 6: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 19:25:19 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:19 executing program 5: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0xf401, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:25:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:19 executing program 6: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 19:25:19 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:19 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x2) ppoll(&(0x7f0000bc0fd0)=[{r1}], 0x1, &(0x7f0000c03ff0), &(0x7f0000a1bff8), 0x8) 19:25:19 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:20 executing program 5: socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0xf401, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 19:25:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:20 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 19:25:20 executing program 6: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:20 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:20 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:20 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:20 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000140)=0x8) 19:25:20 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:20 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:20 executing program 6: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:20 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48c}]}) 19:25:20 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:20 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:20 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = getuid() r1 = getegid() fchown(0xffffffffffffffff, r0, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000340)=""/252) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r2, 0x0) 19:25:21 executing program 6: close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000002c0)) io_setup(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000240)="3fbeaefb9b3af1bdbe3b2ca8511065c1b98cecf21f709d7c0000410369f3932b2f6d008e7110949cf6704bde5ece3e8e02ba60d6851194b6e2a23f877f009a4ebe7616cdad8bdea2d4d31484a6ad", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) 19:25:21 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000140)=0x8) 19:25:21 executing program 2: r0 = socket(0x200000000000011, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 19:25:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x4b, 0x198, 0x198, 0xffffffff, 0xcc, 0x0, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f00000005c0), {[{{@uncond, 0x0, 0x98, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, @gre_key}}}}, {{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'team_slave_1\x00'}, 0x0, 0x1c, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x1a3, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xcc}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1=0xe0000001, @icmp_id, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0xffffffab, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfffffffffffffd74) 19:25:21 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002180)) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r2}, 0x10) dup2(r1, r0) 19:25:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48c}]}) 19:25:21 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000640)='./file0//ile0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0//ile0\x00') rmdir(&(0x7f0000000600)='./file0//ile0\x00') 19:25:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002180)) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r2}, 0x10) dup2(r1, r0) 19:25:21 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x2, 0x0) dup3(r0, r1, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000000c0), 0x0) 19:25:21 executing program 2: r0 = socket(0x200000000000011, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 19:25:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x4b, 0x198, 0x198, 0xffffffff, 0xcc, 0x0, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f00000005c0), {[{{@uncond, 0x0, 0x98, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, @gre_key}}}}, {{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'team_slave_1\x00'}, 0x0, 0x1c, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x1a3, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xcc}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1=0xe0000001, @icmp_id, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0xffffffab, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfffffffffffffd74) 19:25:21 executing program 6: close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000002c0)) io_setup(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000240)="3fbeaefb9b3af1bdbe3b2ca8511065c1b98cecf21f709d7c0000410369f3932b2f6d008e7110949cf6704bde5ece3e8e02ba60d6851194b6e2a23f877f009a4ebe7616cdad8bdea2d4d31484a6ad", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) 19:25:21 executing program 5: close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000002c0)) io_setup(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000240)="3fbeaefb9b3af1bdbe3b2ca8511065c1b98cecf21f709d7c0000410369f3932b2f6d008e7110949cf6704bde5ece3e8e02ba60d6851194b6e2a23f877f009a4ebe7616cdad8bdea2d4d31484a6ad", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) 19:25:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48c}]}) 19:25:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x4b, 0x198, 0x198, 0xffffffff, 0xcc, 0x0, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f00000005c0), {[{{@uncond, 0x0, 0x98, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, @gre_key}}}}, {{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'team_slave_1\x00'}, 0x0, 0x1c, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x1a3, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xcc}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1=0xe0000001, @icmp_id, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0xffffffab, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfffffffffffffd74) 19:25:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000400)={0xffffff7f}) 19:25:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000400)={0xffffff7f}) 19:25:22 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002180)) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r2}, 0x10) dup2(r1, r0) 19:25:22 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 19:25:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x4b, 0x198, 0x198, 0xffffffff, 0xcc, 0x0, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f00000005c0), {[{{@uncond, 0x0, 0x98, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff, @gre_key}}}}, {{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'vcan0\x00', 'team_slave_1\x00'}, 0x0, 0x1c, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x1a3, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xcc}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1=0xe0000001, @icmp_id, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0xffffffab, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0xfffffffffffffd74) 19:25:22 executing program 5: close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000002c0)) io_setup(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000240)="3fbeaefb9b3af1bdbe3b2ca8511065c1b98cecf21f709d7c0000410369f3932b2f6d008e7110949cf6704bde5ece3e8e02ba60d6851194b6e2a23f877f009a4ebe7616cdad8bdea2d4d31484a6ad", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) 19:25:22 executing program 2: r0 = socket(0x200000000000011, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 19:25:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48c}]}) 19:25:22 executing program 6: close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000002c0)) io_setup(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000240)="3fbeaefb9b3af1bdbe3b2ca8511065c1b98cecf21f709d7c0000410369f3932b2f6d008e7110949cf6704bde5ece3e8e02ba60d6851194b6e2a23f877f009a4ebe7616cdad8bdea2d4d31484a6ad", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) 19:25:22 executing program 2: r0 = socket(0x200000000000011, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 19:25:22 executing program 5: close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000002c0)) io_setup(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000240)="3fbeaefb9b3af1bdbe3b2ca8511065c1b98cecf21f709d7c0000410369f3932b2f6d008e7110949cf6704bde5ece3e8e02ba60d6851194b6e2a23f877f009a4ebe7616cdad8bdea2d4d31484a6ad", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) 19:25:22 executing program 4: personality(0xc40000a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000003, 0x31, 0xffffffffffffffff, 0x0) 19:25:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000400)={0xffffff7f}) 19:25:22 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002180)) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r2}, 0x10) dup2(r1, r0) 19:25:22 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 19:25:22 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x3) 19:25:22 executing program 6: close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000002c0)) io_setup(0x0, &(0x7f00000000c0)) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000240)="3fbeaefb9b3af1bdbe3b2ca8511065c1b98cecf21f709d7c0000410369f3932b2f6d008e7110949cf6704bde5ece3e8e02ba60d6851194b6e2a23f877f009a4ebe7616cdad8bdea2d4d31484a6ad", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) close(r0) 19:25:22 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='[::0.e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) 19:25:22 executing program 4: personality(0xc40000a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000003, 0x31, 0xffffffffffffffff, 0x0) 19:25:22 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 19:25:22 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x3) 19:25:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0020000000000000000000000000f15f"], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000400)={0xffffff7f}) [ 571.362246] libceph: parse_ips bad ip '[::0.e' 19:25:22 executing program 6: syz_emit_ethernet(0xfffffffffffffff2, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xbdc3, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 19:25:22 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x3) 19:25:22 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='[::0.e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) [ 571.634855] libceph: parse_ips bad ip '[::0.e' 19:25:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0020000000000000000000000000f15f"], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:23 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 19:25:23 executing program 4: personality(0xc40000a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000003, 0x31, 0xffffffffffffffff, 0x0) 19:25:23 executing program 1: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 19:25:23 executing program 3: signalfd4(0xffffffffffffffff, &(0x7f0000002d40), 0x8, 0x3) 19:25:23 executing program 6: syz_emit_ethernet(0xfffffffffffffff2, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xbdc3, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 19:25:23 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='[::0.e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) 19:25:23 executing program 4: personality(0xc40000a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000003, 0x31, 0xffffffffffffffff, 0x0) 19:25:23 executing program 6: syz_emit_ethernet(0xfffffffffffffff2, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xbdc3, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 19:25:23 executing program 1: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 19:25:23 executing program 5: syz_emit_ethernet(0xfffffffffffffff2, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xbdc3, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 19:25:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x48, 0x0, &(0x7f0000000080)={0xa, 0xd, 0x2000000000e, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 19:25:23 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0xff76}, 0x1}, 0x0) [ 571.844633] libceph: parse_ips bad ip '[::0.e' 19:25:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0020000000000000000000000000f15f"], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:23 executing program 5: syz_emit_ethernet(0xfffffffffffffff2, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xbdc3, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 19:25:23 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f00001be000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x0) 19:25:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x48, 0x0, &(0x7f0000000080)={0xa, 0xd, 0x2000000000e, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 19:25:23 executing program 1: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 19:25:23 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000000)='[::0.e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) 19:25:23 executing program 6: syz_emit_ethernet(0xfffffffffffffff2, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xbdc3, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 19:25:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x48, 0x0, &(0x7f0000000080)={0xa, 0xd, 0x2000000000e, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 19:25:23 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0xff76}, 0x1}, 0x0) 19:25:23 executing program 1: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) 19:25:23 executing program 5: syz_emit_ethernet(0xfffffffffffffff2, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) r0 = memfd_create(&(0x7f0000000180)='ppp1self[cpuset\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0x1c9c380}}], 0x30) write$sndseq(r0, &(0x7f0000000280)=[{0x0, 0xbdc3, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 19:25:23 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f00001be000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x0) [ 572.136741] libceph: parse_ips bad ip '[::0.e' 19:25:23 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0844123, &(0x7f0000001f64)="96") 19:25:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0020000000000000000000000000f15f"], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xdfeffffffffffff2, &(0x7f0000000140)) 19:25:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x48, 0x0, &(0x7f0000000080)={0xa, 0xd, 0x2000000000e, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 19:25:23 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r0, 0x8922, &(0x7f0000000000)) 19:25:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000000c0)=@fragment={0xef, 0x0, 0x9, 0x5f, 0x0, 0x5, 0x68}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket(0x1, 0x200000002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup2(r1, r2) 19:25:23 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0xff76}, 0x1}, 0x0) 19:25:23 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f00001be000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x0) 19:25:23 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0844123, &(0x7f0000001f64)="96") 19:25:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xdfeffffffffffff2, &(0x7f0000000140)) 19:25:23 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0844123, &(0x7f0000001f64)="96") 19:25:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 19:25:23 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f00001be000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x0) 19:25:23 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0xff76}, 0x1}, 0x0) 19:25:24 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r0, 0x8922, &(0x7f0000000000)) 19:25:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xd2}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 19:25:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000000c0)=@fragment={0xef, 0x0, 0x9, 0x5f, 0x0, 0x5, 0x68}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket(0x1, 0x200000002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup2(r1, r2) 19:25:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xdfeffffffffffff2, &(0x7f0000000140)) 19:25:24 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0844123, &(0x7f0000001f64)="96") 19:25:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000000c0)=@fragment={0xef, 0x0, 0x9, 0x5f, 0x0, 0x5, 0x68}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket(0x1, 0x200000002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup2(r1, r2) 19:25:24 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r0, 0x8922, &(0x7f0000000000)) 19:25:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 19:25:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xdfeffffffffffff2, &(0x7f0000000140)) 19:25:24 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 19:25:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xd2}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 19:25:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000000c0)=@fragment={0xef, 0x0, 0x9, 0x5f, 0x0, 0x5, 0x68}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket(0x1, 0x200000002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup2(r1, r2) 19:25:24 executing program 6: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x8002) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0xc0205710, &(0x7f0000000100)) 19:25:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000000c0)=@fragment={0xef, 0x0, 0x9, 0x5f, 0x0, 0x5, 0x68}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket(0x1, 0x200000002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup2(r1, r2) 19:25:24 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$FS_IOC_FSSETXATTR(r0, 0x8922, &(0x7f0000000000)) 19:25:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0xff8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 19:25:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xd2}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 19:25:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000000c0)=@fragment={0xef, 0x0, 0x9, 0x5f, 0x0, 0x5, 0x68}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket(0x1, 0x200000002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup2(r1, r2) 19:25:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 19:25:24 executing program 6: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x8002) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0xc0205710, &(0x7f0000000100)) 19:25:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000000c0)=@fragment={0xef, 0x0, 0x9, 0x5f, 0x0, 0x5, 0x68}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) r1 = socket(0x1, 0x200000002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup2(r1, r2) 19:25:24 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 19:25:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 19:25:24 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="71e67a11cdf8311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000bb40)=[{{&(0x7f0000007a00)=@hci, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/222, 0xd2}], 0x1, &(0x7f0000007c00)=""/214, 0xd6}}], 0x1, 0x0, &(0x7f000000bc80)) 19:25:24 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x8002) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0xc0205710, &(0x7f0000000100)) 19:25:24 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 19:25:24 executing program 6: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x8002) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0xc0205710, &(0x7f0000000100)) 19:25:24 executing program 4: socketpair(0xf, 0x3, 0x0, &(0x7f0000000000)) 19:25:24 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 19:25:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 19:25:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001400), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0xc, 0x29, 0x5}], 0xc}}], 0x2, 0x0) 19:25:24 executing program 4: socketpair(0xf, 0x3, 0x0, &(0x7f0000000000)) 19:25:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0xff8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 19:25:25 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x8002) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0xc0205710, &(0x7f0000000100)) 19:25:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 19:25:25 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 19:25:25 executing program 6: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x8002) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0xc0205710, &(0x7f0000000100)) 19:25:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000000040)=""/128, 0x80) 19:25:25 executing program 4: socketpair(0xf, 0x3, 0x0, &(0x7f0000000000)) 19:25:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001400), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0xc, 0x29, 0x5}], 0xc}}], 0x2, 0x0) 19:25:25 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="130000001000ffdde200f49ff60f050000230a00", 0x14) 19:25:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) 19:25:25 executing program 4: socketpair(0xf, 0x3, 0x0, &(0x7f0000000000)) 19:25:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001400), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0xc, 0x29, 0x5}], 0xc}}], 0x2, 0x0) 19:25:25 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x401) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffffe}) ioctl$TCSETAW(r0, 0x5408, &(0x7f0000000280)) 19:25:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 19:25:25 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x8002) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0xc0205710, &(0x7f0000000100)) 19:25:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) 19:25:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0xff8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 19:25:25 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 19:25:25 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="130000001000ffdde200f49ff60f050000230a00", 0x14) 19:25:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f000000ac80)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001400), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0xc, 0x29, 0x5}], 0xc}}], 0x2, 0x0) 19:25:25 executing program 5: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@sco={0x1f, {0x1}}, 0x8) 19:25:25 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x401) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffffe}) ioctl$TCSETAW(r0, 0x5408, &(0x7f0000000280)) 19:25:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) 19:25:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 19:25:25 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 19:25:25 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="130000001000ffdde200f49ff60f050000230a00", 0x14) 19:25:25 executing program 5: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@sco={0x1f, {0x1}}, 0x8) 19:25:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)) 19:25:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x401) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffffe}) ioctl$TCSETAW(r0, 0x5408, &(0x7f0000000280)) 19:25:25 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x401) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffffe}) ioctl$TCSETAW(r0, 0x5408, &(0x7f0000000280)) 19:25:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='Ehreaded\x00', 0x1) 19:25:25 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x0, 0x0) write(r0, &(0x7f0000000140)="130000001000ffdde200f49ff60f050000230a00", 0x14) 19:25:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000240)='U', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0xff8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 19:25:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 19:25:26 executing program 5: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@sco={0x1f, {0x1}}, 0x8) 19:25:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000000)=0x3e6213a1, 0x12) 19:25:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x401) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffffe}) ioctl$TCSETAW(r0, 0x5408, &(0x7f0000000280)) 19:25:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x401) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffffe}) ioctl$TCSETAW(r0, 0x5408, &(0x7f0000000280)) 19:25:26 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0xfffffffffffffe67) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x11, 0x0, {0x0, 0x0, 0x1}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000001240)={'#! ', './file0', [], 0xa, "4afaf33ed6ff34c4a0aaed850e7352d818fb9d2af04ffa2989337d6029194b8eae96beb24df9b03e6855578b97d3a4"}, 0x3a) 19:25:26 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)={{0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2}}, 0x7b) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), &(0x7f00000005c0), 0x1000) 19:25:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000000)=0x3e6213a1, 0x12) 19:25:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x401) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffffe}) ioctl$TCSETAW(r0, 0x5408, &(0x7f0000000280)) 19:25:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x800000000004, 0x4, 0x9}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) 19:25:26 executing program 5: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@sco={0x1f, {0x1}}, 0x8) 19:25:26 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000011c0)="000000800000800000") 19:25:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000000)=0x3e6213a1, 0x12) 19:25:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x1) 19:25:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0x0, 0x207, 0x1}, 0x14}, 0x1}, 0x0) 19:25:26 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000011c0)="000000800000800000") 19:25:26 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)={{0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2}}, 0x7b) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), &(0x7f00000005c0), 0x1000) 19:25:26 executing program 4: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b885, 0x0) 19:25:26 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x1) 19:25:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000000)=0x3e6213a1, 0x12) 19:25:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0x0, 0x207, 0x1}, 0x14}, 0x1}, 0x0) 19:25:27 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0xfffffffffffffe67) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x11, 0x0, {0x0, 0x0, 0x1}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000001240)={'#! ', './file0', [], 0xa, "4afaf33ed6ff34c4a0aaed850e7352d818fb9d2af04ffa2989337d6029194b8eae96beb24df9b03e6855578b97d3a4"}, 0x3a) 19:25:27 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="220000002000070700be000405000c0080000088e4903c738acb4600000000000000", 0x22) 19:25:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x1) 19:25:27 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:27 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000011c0)="000000800000800000") 19:25:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0x0, 0x207, 0x1}, 0x14}, 0x1}, 0x0) 19:25:27 executing program 4: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b885, 0x0) 19:25:27 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)={{0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2}}, 0x7b) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), &(0x7f00000005c0), 0x1000) 19:25:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x1) 19:25:27 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000011c0)="000000800000800000") [ 575.825227] netlink: 6 bytes leftover after parsing attributes in process `syz-executor2'. 19:25:27 executing program 4: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b885, 0x0) 19:25:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0x0, 0x207, 0x1}, 0x14}, 0x1}, 0x0) 19:25:27 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="220000002000070700be000405000c0080000088e4903c738acb4600000000000000", 0x22) 19:25:27 executing program 0: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b885, 0x0) 19:25:27 executing program 7: r0 = memfd_create(&(0x7f0000000080)="5bd295e7a5c45ebd0000", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)={{0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2}}, 0x7b) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000140), &(0x7f00000005c0), 0x1000) 19:25:27 executing program 0: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b885, 0x0) [ 576.027478] netlink: 6 bytes leftover after parsing attributes in process `syz-executor2'. 19:25:28 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0xfffffffffffffe67) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x11, 0x0, {0x0, 0x0, 0x1}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000001240)={'#! ', './file0', [], 0xa, "4afaf33ed6ff34c4a0aaed850e7352d818fb9d2af04ffa2989337d6029194b8eae96beb24df9b03e6855578b97d3a4"}, 0x3a) 19:25:28 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0x8, 0x1, [{0x0, 0x0, 0x0, 0xfffffffffffffffd}]}]}, 0x24}, 0x1}, 0x0) 19:25:28 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="220000002000070700be000405000c0080000088e4903c738acb4600000000000000", 0x22) 19:25:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x800000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}, &(0x7f0000000380)=0x98) 19:25:28 executing program 4: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b885, 0x0) 19:25:28 executing program 0: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b885, 0x0) 19:25:28 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0xff, 0x8040) poll(&(0x7f0000000000)=[{r1, 0x84ae}], 0x1, 0x0) 19:25:28 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:28 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0x8, 0x1, [{0x0, 0x0, 0x0, 0xfffffffffffffffd}]}]}, 0x24}, 0x1}, 0x0) [ 577.091015] netlink: 6 bytes leftover after parsing attributes in process `syz-executor2'. 19:25:28 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:28 executing program 7: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x800000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}, &(0x7f0000000380)=0x98) 19:25:28 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:28 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000240)="220000002000070700be000405000c0080000088e4903c738acb4600000000000000", 0x22) 19:25:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x800000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}, &(0x7f0000000380)=0x98) 19:25:28 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0x8, 0x1, [{0x0, 0x0, 0x0, 0xfffffffffffffffd}]}]}, 0x24}, 0x1}, 0x0) [ 577.278235] netlink: 6 bytes leftover after parsing attributes in process `syz-executor2'. 19:25:29 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:29 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:29 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:29 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:29 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c}, [@RTA_DST={0x8, 0x1, [{0x0, 0x0, 0x0, 0xfffffffffffffffd}]}]}, 0x24}, 0x1}, 0x0) 19:25:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x800000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @broadcast=0xffffffff}}}, &(0x7f0000000380)=0x98) 19:25:29 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)) write$vnet(r0, &(0x7f0000002440)={0x1, {&(0x7f00000025c0)=""/246, 0xf6, &(0x7f0000002340)=""/201}}, 0xfffffffffffffe67) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x11, 0x0, {0x0, 0x0, 0x1}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000001240)={'#! ', './file0', [], 0xa, "4afaf33ed6ff34c4a0aaed850e7352d818fb9d2af04ffa2989337d6029194b8eae96beb24df9b03e6855578b97d3a4"}, 0x3a) 19:25:29 executing program 7: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:29 executing program 6: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000000)='nfs\x00', 0x0, &(0x7f000000a000)) 19:25:29 executing program 5: setrlimit(0x7, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x3, &(0x7f0000003000)=@framed={{0x18}, [], {0x95}}, &(0x7f000000b000)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x48) 19:25:29 executing program 6: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000000)='nfs\x00', 0x0, &(0x7f000000a000)) 19:25:29 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:29 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:29 executing program 0: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:30 executing program 5: setrlimit(0x7, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x3, &(0x7f0000003000)=@framed={{0x18}, [], {0x95}}, &(0x7f000000b000)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x48) 19:25:30 executing program 7: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:30 executing program 6: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000000)='nfs\x00', 0x0, &(0x7f000000a000)) 19:25:30 executing program 1: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)) r1 = epoll_create(0x20) r2 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0xfff, 0x1) ioctl$TCXONC(r2, 0x540a, 0x16800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000740)=0xe8) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000018000005fc03000b00080b618b0f0500fe8000000000000000000000000000200800140003000000"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x80) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000200)={0x5}, &(0x7f0000000480)=0x325) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000400), &(0x7f0000000500)=0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000540)=0x1) ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f0000000380)={[], 0x3, 0x2, 0x200000000, 0x5, 0xe71, r5}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x20000, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000300)=0xc) mq_timedreceive(r0, &(0x7f00000000c0)=""/222, 0xde, 0x0, &(0x7f0000000280)={0x0, 0x1c9c380}) 19:25:30 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:30 executing program 5: setrlimit(0x7, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x3, &(0x7f0000003000)=@framed={{0x18}, [], {0x95}}, &(0x7f000000b000)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x48) 19:25:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4018aebd, &(0x7f0000000000)={0xfffffffffffffffd}) 19:25:30 executing program 6: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000000)='nfs\x00', 0x0, &(0x7f000000a000)) 19:25:30 executing program 0: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) lseek(r0, 0x0, 0x3) 19:25:30 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='{', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 19:25:30 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) readahead(r0, 0x91, 0x0) 19:25:30 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='{', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 19:25:30 executing program 0: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) lseek(r0, 0x0, 0x3) 19:25:30 executing program 5: setrlimit(0x7, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001fb8)={0x1, 0x3, &(0x7f0000003000)=@framed={{0x18}, [], {0x95}}, &(0x7f000000b000)='syzkaller\x00', 0x7e0, 0xe7, &(0x7f0000002f19)=""/231}, 0x48) 19:25:30 executing program 1: unshare(0x2000400) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000061e000)={0xd, 0x2, 0x4, 0x69, 0x0, r0}, 0x2c) 19:25:30 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010000800000000000000000000000000000002d"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:30 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) readahead(r0, 0x91, 0x0) 19:25:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4018aebd, &(0x7f0000000000)={0xfffffffffffffffd}) 19:25:30 executing program 1: unshare(0x2000400) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000061e000)={0xd, 0x2, 0x4, 0x69, 0x0, r0}, 0x2c) 19:25:31 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) readahead(r0, 0x91, 0x0) 19:25:31 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x100, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x14) syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x1) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x8040000}, 0xc) 19:25:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4018aebd, &(0x7f0000000000)={0xfffffffffffffffd}) 19:25:31 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='{', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 19:25:31 executing program 0: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) lseek(r0, 0x0, 0x3) 19:25:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) dup2(r2, r1) 19:25:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010000800000000000000000000000000000002d"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:31 executing program 1: unshare(0x2000400) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000061e000)={0xd, 0x2, 0x4, 0x69, 0x0, r0}, 0x2c) 19:25:31 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) readahead(r0, 0x91, 0x0) 19:25:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4018aebd, &(0x7f0000000000)={0xfffffffffffffffd}) 19:25:31 executing program 0: r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) lseek(r0, 0x0, 0x3) 19:25:31 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)='{', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 19:25:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) dup2(r2, r1) 19:25:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010000800000000000000000000000000000002d"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:31 executing program 1: unshare(0x2000400) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f000061e000)={0xd, 0x2, 0x4, 0x69, 0x0, r0}, 0x2c) 19:25:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) dup2(r2, r1) 19:25:31 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x5) 19:25:31 executing program 2: io_setup(0x6, &(0x7f0000000040)=0x0) io_destroy(r0) io_setup(0x80a, &(0x7f0000000280)) io_destroy(r0) 19:25:31 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x2e) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:31 executing program 4: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000100), 0x1) 19:25:31 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x5) 19:25:31 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) waitid(0x0, 0x0, 0x0, 0x20000006, &(0x7f00000000c0)) 19:25:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xa4f8) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010000800000000000000000000000000000002d"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:25:31 executing program 2: io_setup(0x6, &(0x7f0000000040)=0x0) io_destroy(r0) io_setup(0x80a, &(0x7f0000000280)) io_destroy(r0) 19:25:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) dup2(r2, r1) 19:25:31 executing program 4: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000100), 0x1) 19:25:31 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x5) 19:25:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) dup2(r2, r1) 19:25:31 executing program 2: io_setup(0x6, &(0x7f0000000040)=0x0) io_destroy(r0) io_setup(0x80a, &(0x7f0000000280)) io_destroy(r0) 19:25:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35}, 0x8) 19:25:31 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x19fd, 0x5) 19:25:31 executing program 4: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000100), 0x1) 19:25:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35}, 0x8) 19:25:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) dup2(r2, r1) 19:25:32 executing program 2: io_setup(0x6, &(0x7f0000000040)=0x0) io_destroy(r0) io_setup(0x80a, &(0x7f0000000280)) io_destroy(r0) 19:25:32 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) r3 = eventfd(0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r2}) 19:25:32 executing program 4: r0 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000f3eff0)="01010000000ef40000000300409d9254", 0x10) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendfile(r2, r0, &(0x7f0000000100), 0x1) 19:25:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35}, 0x8) 19:25:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r2) dup2(r2, r1) 19:25:32 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x2e) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) waitid(0x0, 0x0, 0x0, 0x20000006, &(0x7f00000000c0)) 19:25:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) waitid(0x0, 0x0, 0x0, 0x20000006, &(0x7f00000000c0)) 19:25:32 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0x2e) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 19:25:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) waitid(0x0, 0x0, 0x0, 0x20000006, &(0x7f00000000c0)) [ 581.166887] ================================================================== [ 581.175170] BUG: KASAN: use-after-free in irq_bypass_register_consumer+0x51e/0x550 [ 581.183053] Write of size 8 at addr ffff8801d8aef668 by task syz-executor7/7547 [ 581.190908] [ 581.192556] CPU: 1 PID: 7547 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #48 [ 581.199899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.209382] Call Trace: [ 581.212006] dump_stack+0x1c9/0x2b4 [ 581.215753] ? dump_stack_print_info.cold.2+0x52/0x52 [ 581.221126] ? printk+0xa7/0xcf [ 581.224562] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 581.229334] ? irq_bypass_register_consumer+0x51e/0x550 [ 581.234711] print_address_description+0x6c/0x20b [ 581.239655] ? irq_bypass_register_consumer+0x51e/0x550 [ 581.245127] kasan_report.cold.7+0x242/0x2fe [ 581.249538] __asan_report_store8_noabort+0x17/0x20 [ 581.254665] irq_bypass_register_consumer+0x51e/0x550 [ 581.259857] ? __disconnect+0x1b0/0x1b0 [ 581.263846] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 581.268859] kvm_irqfd+0x198e/0x1ef0 [ 581.272586] ? kvm_eventfd_init+0x2c0/0x2c0 [ 581.276908] ? futex_wait_setup+0x281/0x410 [ 581.281247] ? lock_downgrade+0x8f0/0x8f0 [ 581.285392] ? check_same_owner+0x340/0x340 [ 581.289717] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.295431] ? _copy_from_user+0xdf/0x150 [ 581.299770] kvm_vm_ioctl+0xf80/0x1d80 [ 581.303825] ? get_empty_filp+0x12d/0x530 [ 581.307975] ? alloc_file+0x24/0x3e0 [ 581.311897] ? anon_inode_getfile+0x2a2/0x4e0 [ 581.316482] ? kvm_set_memory_region+0x50/0x50 [ 581.321077] ? entry_SYSENTER_compat+0x70/0x7f [ 581.325657] ? do_futex+0x249/0x27d0 [ 581.329362] ? graph_lock+0x170/0x170 [ 581.333265] ? rcu_is_watching+0x8c/0x150 [ 581.337413] ? exit_robust_list+0x290/0x290 [ 581.341831] ? find_held_lock+0x36/0x1c0 [ 581.345920] ? lock_downgrade+0x8f0/0x8f0 [ 581.350154] ? kasan_check_read+0x11/0x20 [ 581.354292] ? rcu_is_watching+0x8c/0x150 [ 581.358440] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 581.362854] ? __fget+0x414/0x670 [ 581.366313] ? expand_files.part.8+0x9c0/0x9c0 [ 581.370906] ? __fd_install+0x2db/0x880 [ 581.374906] ? get_unused_fd_flags+0x1a0/0x1a0 [ 581.379480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.385019] ? alloc_file+0x44/0x3e0 [ 581.388741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.394360] ? anon_inode_getfile+0x388/0x4e0 [ 581.398855] ? __fget_light+0x2f7/0x440 [ 581.402845] ? get_unused_fd_flags+0x122/0x1a0 [ 581.407463] kvm_vm_compat_ioctl+0x143/0x430 [ 581.411865] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 581.416033] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 581.420996] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 581.426882] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 581.431050] __ia32_compat_sys_ioctl+0x221/0x640 [ 581.435922] do_fast_syscall_32+0x34d/0xfb2 [ 581.440256] ? do_int80_syscall_32+0x890/0x890 [ 581.444836] ? _raw_spin_unlock_irq+0x27/0x70 [ 581.449592] ? finish_task_switch+0x1d3/0x870 [ 581.454082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.460154] ? syscall_return_slowpath+0x31d/0x5e0 [ 581.465080] ? sysret32_from_system_call+0x5/0x46 [ 581.470118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 581.475050] entry_SYSENTER_compat+0x70/0x7f [ 581.479488] RIP: 0023:0xf7faacb9 [ 581.482842] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 581.502183] RSP: 002b:00000000f5fa60ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 581.509900] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 000000004020ae76 [ 581.517358] RDX: 00000000200015c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.524615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.532068] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 581.539327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.546602] [ 581.548218] Allocated by task 7547: [ 581.551854] save_stack+0x43/0xd0 [ 581.555500] kasan_kmalloc+0xc4/0xe0 [ 581.559204] kmem_cache_alloc_trace+0x152/0x780 [ 581.563945] kvm_irqfd+0x18f/0x1ef0 [ 581.567577] kvm_vm_ioctl+0xf80/0x1d80 [ 581.571594] kvm_vm_compat_ioctl+0x143/0x430 [ 581.575994] __ia32_compat_sys_ioctl+0x221/0x640 [ 581.580837] do_fast_syscall_32+0x34d/0xfb2 [ 581.585406] entry_SYSENTER_compat+0x70/0x7f [ 581.589796] [ 581.591425] Freed by task 14107: [ 581.594791] save_stack+0x43/0xd0 [ 581.598276] __kasan_slab_free+0x11a/0x170 [ 581.602502] kasan_slab_free+0xe/0x10 [ 581.606300] kfree+0xd9/0x260 [ 581.609394] irqfd_shutdown+0x144/0x1c0 [ 581.613366] process_one_work+0xc73/0x1ba0 [ 581.617588] worker_thread+0x189/0x13c0 [ 581.621547] kthread+0x345/0x410 [ 581.624916] ret_from_fork+0x3a/0x50 [ 581.628610] [ 581.630227] The buggy address belongs to the object at ffff8801d8aef500 [ 581.630227] which belongs to the cache kmalloc-512 of size 512 [ 581.642978] The buggy address is located 360 bytes inside of [ 581.642978] 512-byte region [ffff8801d8aef500, ffff8801d8aef700) [ 581.654836] The buggy address belongs to the page: [ 581.659769] page:ffffea000762bbc0 count:1 mapcount:0 mapping:ffff8801da800940 index:0x0 [ 581.667904] flags: 0x2fffc0000000100(slab) [ 581.672142] raw: 02fffc0000000100 ffffea0007346808 ffffea0006bf0b08 ffff8801da800940 [ 581.680112] raw: 0000000000000000 ffff8801d8aef000 0000000100000006 0000000000000000 [ 581.687997] page dumped because: kasan: bad access detected [ 581.693702] [ 581.695313] Memory state around the buggy address: [ 581.700240] ffff8801d8aef500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.707690] ffff8801d8aef580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.715038] >ffff8801d8aef600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.722379] ^ [ 581.729471] ffff8801d8aef680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 581.736826] ffff8801d8aef700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 581.744280] ================================================================== [ 581.751629] Disabling lock debugging due to kernel taint [ 581.757301] Kernel panic - not syncing: panic_on_warn set ... [ 581.757301] 19:25:33 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35}, 0x8) [ 581.764687] CPU: 1 PID: 7547 Comm: syz-executor7 Tainted: G B 4.18.0-rc4+ #48 [ 581.773357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.782803] Call Trace: [ 581.785408] dump_stack+0x1c9/0x2b4 [ 581.789142] ? dump_stack_print_info.cold.2+0x52/0x52 [ 581.794354] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 581.799135] panic+0x238/0x4e7 [ 581.802347] ? add_taint.cold.5+0x16/0x16 [ 581.806521] ? do_raw_spin_unlock+0xa7/0x2f0 [ 581.811130] ? irq_bypass_register_consumer+0x51e/0x550 19:25:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) clone(0x0, &(0x7f0000003300), &(0x7f00000022c0), &(0x7f0000004340), &(0x7f0000001200)) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x1) waitid(0x0, 0x0, 0x0, 0x20000006, &(0x7f00000000c0)) [ 581.816611] kasan_end_report+0x47/0x4f [ 581.820912] kasan_report.cold.7+0x76/0x2fe [ 581.825344] __asan_report_store8_noabort+0x17/0x20 [ 581.830403] irq_bypass_register_consumer+0x51e/0x550 [ 581.835701] ? __disconnect+0x1b0/0x1b0 [ 581.839789] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 581.844921] kvm_irqfd+0x198e/0x1ef0 [ 581.848860] ? kvm_eventfd_init+0x2c0/0x2c0 [ 581.853202] ? futex_wait_setup+0x281/0x410 [ 581.857647] ? lock_downgrade+0x8f0/0x8f0 [ 581.861956] ? check_same_owner+0x340/0x340 [ 581.866306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.871946] ? _copy_from_user+0xdf/0x150 [ 581.876111] kvm_vm_ioctl+0xf80/0x1d80 [ 581.880016] ? get_empty_filp+0x12d/0x530 [ 581.884588] ? alloc_file+0x24/0x3e0 [ 581.888297] ? anon_inode_getfile+0x2a2/0x4e0 [ 581.892873] ? kvm_set_memory_region+0x50/0x50 [ 581.897449] ? entry_SYSENTER_compat+0x70/0x7f [ 581.902629] ? do_futex+0x249/0x27d0 [ 581.906340] ? graph_lock+0x170/0x170 [ 581.910129] ? rcu_is_watching+0x8c/0x150 [ 581.914443] ? exit_robust_list+0x290/0x290 [ 581.918752] ? find_held_lock+0x36/0x1c0 [ 581.922811] ? lock_downgrade+0x8f0/0x8f0 [ 581.927047] ? kasan_check_read+0x11/0x20 [ 581.931266] ? rcu_is_watching+0x8c/0x150 [ 581.935573] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 581.942814] ? __fget+0x414/0x670 [ 581.946267] ? expand_files.part.8+0x9c0/0x9c0 [ 581.950937] ? __fd_install+0x2db/0x880 [ 581.954995] ? get_unused_fd_flags+0x1a0/0x1a0 [ 581.959568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.965246] ? alloc_file+0x44/0x3e0 [ 581.968949] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.974484] ? anon_inode_getfile+0x388/0x4e0 [ 581.978981] ? __fget_light+0x2f7/0x440 [ 581.983128] ? get_unused_fd_flags+0x122/0x1a0 [ 581.987718] kvm_vm_compat_ioctl+0x143/0x430 [ 581.992117] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 581.996256] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 582.001261] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 582.007146] ? kvm_vm_ioctl+0x1d80/0x1d80 [ 582.011288] __ia32_compat_sys_ioctl+0x221/0x640 [ 582.016231] do_fast_syscall_32+0x34d/0xfb2 [ 582.020596] ? do_int80_syscall_32+0x890/0x890 [ 582.025169] ? _raw_spin_unlock_irq+0x27/0x70 [ 582.029652] ? finish_task_switch+0x1d3/0x870 [ 582.034148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 582.039671] ? syscall_return_slowpath+0x31d/0x5e0 [ 582.044676] ? sysret32_from_system_call+0x5/0x46 [ 582.049506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 582.054339] entry_SYSENTER_compat+0x70/0x7f [ 582.058910] RIP: 0023:0xf7faacb9 [ 582.062440] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 582.081723] RSP: 002b:00000000f5fa60ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 582.089419] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 000000004020ae76 [ 582.096678] RDX: 00000000200015c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.104040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.111299] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 582.118569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.126875] Dumping ftrace buffer: [ 582.130415] (ftrace buffer empty) [ 582.134123] Kernel Offset: disabled [ 582.137735] Rebooting in 86400 seconds..